4.3Medium
CVE-2026-22918
Description
An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data.
Weakness (CWE):
CWE-1021
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| SICK AG | TDC-X401GL | all versions | |
| sick | tdc-x401gl firmware | — |
References and patches
- https://sick.com/psirt Vendor Advisory
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_… Product
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf vendor-advisoryVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:*