CVE-2026-22912: Medium severity SICK Tdc-x401gl Firmware vulnerability

Published Jan 15, 2026

Updated

Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to various risk including stealing credentials from unsuspecting users.

Affected Software

2 affected components

All of the following

SICK Tdc-x401gl Firmware<1.5.0

SICK Tdc-x401gl

Remediation

Information

Users are strongly recommended to upgrade to the latest release of TDC-X401GL (>= 1.5.0).

Event History

Jan 15, 2026

CVE Published

via MITRE·01:03 PM

Data Sourced

via MITRE·01:03 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:16 PM

DescriptionSeverityWeaknessAffected Software

Jul 7, 58079

Event

via FIRST·10:47 AM

Frequently Asked Questions

What is the severity of CVE-2026-22912?

CVE-2026-22912 has a medium severity rating due to the potential for unauthorized redirection to malicious websites.

How do I fix CVE-2026-22912?

To fix CVE-2026-22912, validate and sanitize the login parameters to prevent malicious redirects after authentication.

What software is affected by CVE-2026-22912?

CVE-2026-22912 affects the SICK Tdc-x401gl Firmware versions prior to 1.5.0.

What can an attacker do with CVE-2026-22912?

An attacker can exploit CVE-2026-22912 to redirect authenticated users to malicious websites, potentially stealing their credentials.

How can users protect themselves from CVE-2026-22912?

Users can protect themselves from CVE-2026-22912 by ensuring that the affected software is updated to version 1.5.0 or later.