Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access.
References
| Link | Resource |
|---|---|
| https://sick.com/psirt | Vendor Advisory |
| https://www.cisa.gov/resources-tools/resources/ics-recommended-practices | US Government Resource |
| https://www.first.org/cvss/calculator/3.1 | Not Applicable |
| https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json | Vendor Advisory |
| https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf | Vendor Advisory |
| https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf | Product |
Configurations
History
29 Jan 2026, 17:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://sick.com/psirt - Vendor Advisory | |
| References | () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - US Government Resource | |
| References | () https://www.first.org/cvss/calculator/3.1 - Not Applicable | |
| References | () https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json - Vendor Advisory | |
| References | () https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf - Vendor Advisory | |
| References | () https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf - Product | |
| CPE | cpe:2.3:a:sick:incoming_goods_suite:*:*:*:*:*:*:*:* | |
| First Time |
Sick
Sick incoming Goods Suite |
15 Jan 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-15 14:16
Updated : 2026-01-29 17:23
NVD link : CVE-2026-22644
Mitre link : CVE-2026-22644
CVE.ORG link : CVE-2026-22644
JSON object : View
Products Affected
sick
- incoming_goods_suite
CWE
CWE-598
Use of GET Request Method With Sensitive Query Strings