CVE-2026-11841

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-11841", "assignerOrgId": "a6863dd2-93fc-443d-bef1-79f0b5020988", "state": "PUBLISHED", "assignerShortName": "SICK AG", "dateReserved": "2026-06-10T06:53:18.277Z", "datePublished": "2026-07-28T09:25:36.738Z", "dateUpdated": "2026-08-24T13:54:22.224Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a6863dd2-93fc-443d-bef1-79f0b5020988", "shortName": "SICK AG", "dateUpdated": "2026-08-24T13:54:22.224Z"}, "title": "CVE-2026-11841", "datePublic": "2026-07-28T10:47:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-552", "description": "CWE-552 Files or directories accessible to external parties", "type": "CWE"}]}], "affected": [{"vendor": "SICK AG", "product": "InspectorP61x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.4.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "InspectorP62x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.4.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "InspectorP65x", "versions": [{"status": "affected", "version": "all versions"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "InspectorP63x", "versions": [{"status": "affected", "version": "all versions"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "InspectorP64x", "versions": [{"status": "affected", "version": "all versions"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "ICR890-4", "versions": [{"status": "affected", "version": "0", "lessThan": "2.15.0", "versionType": "custom"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment.</p>"}]}], "references": [{"url": "https://www.sick.com/psirt", "tags": ["x_SICK PSIRT Security Advisories"]}, {"url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf", "tags": ["x_SICK Operating Guidelines"]}, {"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices", "tags": ["x_ICS-CERT recommended practices on Industrial Security"]}, {"url": "https://www.first.org/cvss/calculator/3.1", "tags": ["x_CVSS v3.1 Calculator"]}, {"url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0010.json", "tags": ["x_The canonical URL."]}, {"url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0010.pdf", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW", "baseSeverity": "CRITICAL", "baseScore": 9.4, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L"}}], "workarounds": [{"lang": "en", "value": "Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources \u201dSICK Operating Guidelines\u201d and \u201dICS-CERT recommended practices on Industrial Security\u201d could help to implement the general security practices.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div>Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources \u201dSICK Operating Guidelines\u201d and \u201dICS-CERT recommended practices on Industrial Security\u201d could help to implement the general security practices.</div></div>"}]}], "solutions": [{"lang": "en", "value": "For\u00a0InspectorP61x and InspectorP62x: Users are recommended to upgrade to version 5.4.0.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><span>For&nbsp;</span>InspectorP61x and InspectorP62x: Users are recommended to upgrade to version 5.4.0.</div>"}]}, {"lang": "en", "value": "For ICR890-4: Users are recommended to upgrade to version 2.15.0", "supportingMedia": [{"type": "text/html", "base64": false, "value": "For ICR890-4: Users are recommended to upgrade to version 2.15.0"}]}], "source": {"advisory": "SCA-2026-0010", "discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-28T19:13:27.519553Z", "id": "CVE-2026-11841", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-28T19:15:14.851Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-11841", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-28T19:13:27.519553Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-28T19:15:11.703Z"}}], "cna": {"title": "CVE-2026-11841", "source": {"advisory": "SCA-2026-0010", "discovery": "INTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.4, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "SICK AG", "product": "InspectorP61x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.4.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "InspectorP62x", "versions": [{"status": "affected", "version": "0", "lessThan": "5.4.0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "InspectorP65x", "versions": [{"status": "affected", "version": "all versions"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "InspectorP63x", "versions": [{"status": "affected", "version": "all versions"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "InspectorP64x", "versions": [{"status": "affected", "version": "all versions"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "ICR890-4", "versions": [{"status": "affected", "version": "0", "lessThan": "2.15.0", "versionType": "custom"}], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "For\u00a0InspectorP61x and InspectorP62x: Users are recommended to upgrade to version 5.4.0.", "supportingMedia": [{"type": "text/html", "value": "<div><span>For&nbsp;</span>InspectorP61x and InspectorP62x: Users are recommended to upgrade to version 5.4.0.</div>", "base64": false}]}, {"lang": "en", "value": "For ICR890-4: Users are recommended to upgrade to version 2.15.0", "supportingMedia": [{"type": "text/html", "value": "For ICR890-4: Users are recommended to upgrade to version 2.15.0", "base64": false}]}], "datePublic": "2026-07-28T10:47:00.000Z", "references": [{"url": "https://www.sick.com/psirt", "tags": ["x_SICK PSIRT Security Advisories"]}, {"url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf", "tags": ["x_SICK Operating Guidelines"]}, {"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices", "tags": ["x_ICS-CERT recommended practices on Industrial Security"]}, {"url": "https://www.first.org/cvss/calculator/3.1", "tags": ["x_CVSS v3.1 Calculator"]}, {"url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0010.json", "tags": ["x_The canonical URL."]}, {"url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0010.pdf", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources \u201dSICK Operating Guidelines\u201d and \u201dICS-CERT recommended practices on Industrial Security\u201d could help to implement the general security practices.", "supportingMedia": [{"type": "text/html", "value": "<div><div>Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources \u201dSICK Operating Guidelines\u201d and \u201dICS-CERT recommended practices on Industrial Security\u201d could help to implement the general security practices.</div></div>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment.", "supportingMedia": [{"type": "text/html", "value": "<p>An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-552", "description": "CWE-552 Files or directories accessible to external parties"}]}], "providerMetadata": {"orgId": "a6863dd2-93fc-443d-bef1-79f0b5020988", "shortName": "SICK AG", "dateUpdated": "2026-08-24T13:54:22.224Z"}}}, "cveMetadata": {"cveId": "CVE-2026-11841", "state": "PUBLISHED", "dateUpdated": "2026-08-24T13:54:22.224Z", "dateReserved": "2026-06-10T06:53:18.277Z", "assignerOrgId": "a6863dd2-93fc-443d-bef1-79f0b5020988", "datePublished": "2026-07-28T09:25:36.738Z", "assignerShortName": "SICK AG"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "InspectorP61x", "vendor": "SICK AG", "versions": [{"lessThan": "5.4.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "InspectorP62x", "vendor": "SICK AG", "versions": [{"lessThan": "5.4.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "InspectorP65x", "vendor": "SICK AG", "versions": [{"status": "affected", "version": "all versions"}]}, {"defaultStatus": "affected", "product": "InspectorP63x", "vendor": "SICK AG", "versions": [{"status": "affected", "version": "all versions"}]}, {"defaultStatus": "affected", "product": "InspectorP64x", "vendor": "SICK AG", "versions": [{"status": "affected", "version": "all versions"}]}, {"defaultStatus": "affected", "product": "ICR890-4", "vendor": "SICK AG", "versions": [{"lessThan": "2.15.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "psirt@sick.de"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment."}], "id": "CVE-2026-11841", "lastModified": "2026-09-09T15:52:04.827", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 9.4, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.5, "source": "psirt@sick.de", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-11841", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-28T19:13:27.519553Z", "version": "2.0.3"}}]}, "published": "2026-07-28T10:16:47.867", "references": [{"source": "psirt@sick.de", "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"}, {"source": "psirt@sick.de", "url": "https://www.first.org/cvss/calculator/3.1"}, {"source": "psirt@sick.de", "url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0010.json"}, {"source": "psirt@sick.de", "url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0010.pdf"}, {"source": "psirt@sick.de", "url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf"}, {"source": "psirt@sick.de", "url": "https://www.sick.com/psirt"}], "sourceIdentifier": "psirt@sick.de", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-552"}], "source": "psirt@sick.de", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.4.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "InspectorP61x", "source": "cna", "vendor": "SICK AG"}, "product": "inspectorp61x", "vendor": "sick_ag"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,5.4.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "InspectorP62x", "source": "cna", "vendor": "SICK AG"}, "product": "inspectorp62x", "vendor": "sick_ag"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "InspectorP63x", "source": "cna", "vendor": "SICK AG"}, "product": "inspectorp63x", "vendor": "sick_ag"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "InspectorP64x", "source": "cna", "vendor": "SICK AG"}, "product": "inspectorp64x", "vendor": "sick_ag"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "InspectorP65x", "source": "cna", "vendor": "SICK AG"}, "product": "inspectorp65x", "vendor": "sick_ag"}], "created": "2026-07-28T20:35:06.180626+00:00", "title": "Unauthenticated AppEngine File Access Allows Remote Code Execution on SICK Inspector Devices", "updated": "2026-08-03T15:30:03.774343+00:00", "vendors": ["sick_ag", "sick_ag$PRODUCT$inspectorp61x", "sick_ag$PRODUCT$inspectorp62x", "sick_ag$PRODUCT$inspectorp63x", "sick_ag$PRODUCT$inspectorp64x", "sick_ag$PRODUCT$inspectorp65x"]}