CVE-2026-22911

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-798 CWE-522

Affected software

Vendor	Product	Versions
SICK AG	TDC-X401GL	all versions

References

https://sick.com/psirtVendor Advisory
https://www.cisa.gov/resources-tools/resources/ics-recommended-practicesUS Government Resource
https://www.first.org/cvss/calculator/3.1Not Applicable
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.jsonVendor Advisory
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdfVendor Advisory
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdfProduct

Timeline

Published: Jan 15, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-229126.1Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to CVE-2026-229136.1Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of CVE-2026-229146.5An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system man CVE-2026-229156.5An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive informatio CVE-2026-229165.4An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions CVE-2026-229177.5Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service.CVE-2026-229188.2An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously cra CVE-2026-229194.8An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) att CVE-2026-22924.4The Morkva UA Shipping plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and inclu CVE-2026-229226.5Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limit CVE-2026-229237.8A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application contain CVE-2026-229249.1A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenti