SICK Incoming Goods Suite Grafana Integration Vulnerabilities: CVE-2026-0712/0713/22637 Analysis

Key Vulnerability Information Summary Vulnerability Overview Affected Product: SICK Incoming Goods Suite Main Affected Modules: Grafana-related management functions Vulnerability Description: Multiple vulnerabilities affect the Grafana integration within SICK Incoming Goods Suite, impacting the product's confidentiality, integrity, and availability. Users are advised to follow general security practices when operating the product. Vulnerability Details CVE-2026-0712 Type: URL redirection to untrusted sites CVSS v3.1 Score: - Base Score: 7.6 - Environmental Score: 7.6 - Severity: High Impact: Malicious attackers can exploit this vulnerability to perform XSS attacks CVE-2026-0713 Type: Improper access control CVSS v3.1 Score: - Base Score: 8.3 - Environmental Score: 8.3 - Severity: High Impact: Authenticated users can bypass dashboard and folder permissions CVE-2026-22637 Type: DOM-based XSS vulnerability CVSS v3.1 Score: - Base Score: 6.1 - Environmental Score: 6.1 - Severity: Medium Impact: Authenticated users with edit permissions can modify specific panels to execute cross-site scripting attacks Vulnerability Scoring and Severity CVSS v3.1 Assessment: - Base scores for individual vulnerabilities range from 4.3 to 8.3 - Some vulnerabilities are high-risk (e.g., CVE-2026-0712, CVE-2026-0713) Mitigation and Prevention Recommendations 1. Update Recommendation: Users are strongly advised to upgrade to the latest version (>= 1.2.1) of Incoming Goods Suite. 2. Security Configuration Recommendations: Reduce network exposure, restrict network access, and follow recommended security operation guidelines. 3. Environmental Assessment: Users should perform environmental scoring assessments based on their actual deployment environment to determine final CVSS scores.

Goal Reached Thanks to every supporter — we hit 100%!

SICK Incoming Goods Suite Grafana Integration Vulnerabilities: CVE-2026-0712/0713/22637 Analysis