CVE-2026-22646: High severity SICK Incoming Goods Suite vulnerability

Published Jan 15, 2026

Updated

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information (like file paths, database errors, or software versions) that can be used to map the application's internal structure and discover other, more critical vulnerabilities.

Affected Software

1 affected component

SICK Incoming Goods Suite<1.2.1

Remediation

Information

Users are strongly recommended to upgrade to the latest release of Incoming Goods Suite (>= 1.2.1).

Event History

Jan 15, 2026

CVE Published

via MITRE·01:15 PM

Data Sourced

via MITRE·01:15 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:16 PM

DescriptionSeverityWeaknessAffected Software

Feb 19, 58052

Event

via FIRST·01:32 PM

Frequently Asked Questions

What is the severity of CVE-2026-22646?

The severity of CVE-2026-22646 is classified as high due to the potential for attackers to gain unauthorized access to sensitive internal system details.

How do I fix CVE-2026-22646?

To fix CVE-2026-22646, ensure that error messages do not disclose sensitive internal details and implement proper error handling mechanisms.

What are the risks associated with CVE-2026-22646?

The risks associated with CVE-2026-22646 include exposure of sensitive information that can be exploited for further attacks on the application.

Which software versions are impacted by CVE-2026-22646?

CVE-2026-22646 affects SICK Incoming Goods Suite versions up to 1.2.1.

How can I identify if my application is vulnerable to CVE-2026-22646?

You can identify if your application is vulnerable to CVE-2026-22646 by reviewing the error messages returned by your application for any revealing internal information.