Skip to content
OpenAdvisories
Critical SCA-2026-0010 1 CVE

AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx devices

Published Aug 24, 2026 · Updated Aug 24, 2026 · Revision 2

Vendor: SICK Product: ICR890-4 Product: ICR890-4 Firmware Product: InspectorP61x Product: InspectorP61x Firmware Product: InspectorP62x Product: InspectorP62x Firmware Product: InspectorP63x Product: InspectorP63x firmware Product: InspectorP64x Product: InspectorP64x firmware Product: InspectorP65x Product: InspectorP65x firmware

Summary

Multiple internal virtual filesystem paths are unintentionally accessible remotely in the SICK ICR890-4 and SICK InspectorP6xx devices. If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integrity, and confidentiality of the devices.

Vulnerabilities 1

  • Critical 9.4
    CVE-2026-11841

    CVE-2026-11841

    An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file…

    SICK ICR890-4 InspectorP62x InspectorP63x

Revision history

  1. #2

    Added ICR to the Products

  2. #1

    Initial version

References