CVE-2026-22645: Infoleak

Published Jan 15, 2026

Updated

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components.

Affected Software

1 affected component

SICK Incoming Goods Suite<1.2.1

Remediation

Information

Users are strongly recommended to upgrade to the latest release of Incoming Goods Suite (>= 1.2.1).

Event History

Jan 15, 2026

CVE Published

via MITRE·01:14 PM

Data Sourced

via MITRE·01:14 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:16 PM

DescriptionSeverityWeaknessAffected Software

Feb 19, 58052

Event

via FIRST·06:44 PM

Frequently Asked Questions

What is the severity of CVE-2026-22645?

CVE-2026-22645 is considered a high severity vulnerability due to the exposure of sensitive information to unauthenticated actors.

How do I fix CVE-2026-22645?

To mitigate CVE-2026-22645, ensure that the application restricts access to component and version information to authenticated users only.

What systems are affected by CVE-2026-22645?

CVE-2026-22645 affects versions of the SICK Incoming Goods Suite up to 1.2.1.

What risks are associated with CVE-2026-22645?

The primary risk of CVE-2026-22645 is that attackers can exploit known vulnerabilities in the components used by the application.

Is there a patch available for CVE-2026-22645?

There is currently no specific patch for CVE-2026-22645, but securing access to sensitive information is essential until a fix is released.