PT-2026-3012 · Sick Ag+1 · Incoming Goods Suite

Published 2026-01-15 · Updated 2026-01-15 · CVE-2026-22645

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions (affected versions not specified)

Description The application reveals details about its components, their versions, and licensing information to anyone, even without logging in. This disclosure allows attackers to identify and exploit known security weaknesses in those components.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-22645

Affected Products

Incoming Goods Suite

References · 9

• https://sick.com/.well-known/csaf/white/2026/sca-2026-0002.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22645 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22645 · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf · Vendor Advisory
• https://sick.com/psirt · Vendor Advisory
• https://twitter.com/CVEnew/status/2011926125346505060 · Twitter Post
• https://first.org/cvss/calculator/3.1 · Note
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note