CVE-2026-22919

LOW

3.8

Description

An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to the extraction of sensitive data.

Details CVE

Score CVSS v3.13.8

SeveriteLOW

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurNONE

Publie1/15/2026

Derniere modification1/23/2026

Sourcenvd

Observations honeypot0

Produits affectes

sick:tdc-x401glsick:tdc-x401gl_firmware

Faiblesses (CWE)

CWE-79

References

https://sick.com/psirt(psirt@sick.de)

https://www.cisa.gov/resources-tools/resources/ics-recommended-practices(psirt@sick.de)

https://www.first.org/cvss/calculator/3.1(psirt@sick.de)

https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json(psirt@sick.de)

https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf(psirt@sick.de)

https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf(psirt@sick.de)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.