CVE-2026-22646: Sick Incoming Goods Suite

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information (like file paths, database errors, or software versions) that can be used to map the application's internal structure and discover other, more critical vulnerabilities.

Affected products

• Sick Incoming Goods Suite: before 1.2.1 (fixed in 1.2.1)

Published 2026-01-15. Last modified 2026-06-17.