PT-2026-2999 · Sick Ag+1 · Tdc-X401Gl+1

Published 2026-01-15 · Updated 2026-01-17 · CVE-2026-22918

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, potentially leading to the extraction of sensitive data. Clickjacking occurs when an attacker overlays a transparent layer on top of a legitimate web page, causing the user to unknowingly interact with hidden elements.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2026-22918

Affected Products

Tdc-X401Gl

Tdc-X401Gl Firmware

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-22918 · Security Note
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.json · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf · Vendor Advisory
• https://sick.com/psirt · Vendor Advisory
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://twitter.com/CVEnew/status/2012490370215469090 · Twitter Post
• https://first.org/cvss/calculator/3.1 · Note