CVE-2026-1626CRITICAL 9.1EPSS p9.7%
CVE-2026-1626CVE-2026-1626
Description
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.
Scoring
| CVSS 3.1 | 9.1 (CRITICAL) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| EPSS | 0.20% probability of exploitation · percentile 9.7% · 2026-06-19T12:03:05Z |
| Published | 2026-02-27 |
| Last modified | 2026-03-05 |
Underlying weaknesses· 1
References
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.json
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Use of a Broken or Risky Cryptographic Algorithmcwe-327 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.