ZeroHour

CVE-2026-22646

CVSS 3.1
7.5 high
EPSS
<1%p33
Published
()
Modified
Description

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information (like file paths, database errors, or software versions) that can be used to map the application's internal structure and discover other, more critical vulnerabilities.

Vendors
sick
Products
incoming goods suite
Weakness
CWE-209
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.