CVE-2026-22916: medium-severity vulnerability in SICK AG TDC-X401GL
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.4%
An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected products
SICK AG · TDC-X401GLRelated CVEs — SICK AG TDC-X401GL
In the same product, most dangerous first.
CVE-2024-10771HIGHSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code executionEPSS 1.1%CVE-2026-22908CRITICALCVE-2026-22908EPSS 0.6%CVE-2026-22909HIGHCVE-2026-22909EPSS 0.6%CVE-2026-22917MEDIUMCVE-2026-22917EPSS 0.6%CVE-2026-22911MEDIUMCVE-2026-22911EPSS 0.5%CVE-2026-22910HIGHCVE-2026-22910EPSS 0.5%
References
https://sick.com/psirthttps://www.cisa.gov/resources-tools/resources/ics-recommended-practiceshttps://www.first.org/cvss/calculator/3.1https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdfhttps://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.jsonhttps://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf