{"schema":"threatline.record/2","record":{"id":"CVE-2026-101290","aliases":[],"summary":"CVE-2026-101290","details":"A remote attacker may send a specially crafted network packet that causes the\naffected application to perform an out-of-bounds memory read due to insufficient validation of\npacket length. This may result in an application crash and a denial-of-service condition.","categories":["Unclassified"],"product":"Sick_Safetyscanners_Base CPP Driver","vendor":"SICK AG","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101290","source_modified_at":"2026-10-15T13:49:55.870Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Sick_Safetyscanners_Base CPP Driver","vendor":"SICK AG","versions":[{"status":"affected","version":"0","lessThanOrEqual":"1.0.4","versionType":"custom"}],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":7.5,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00453,"percentile":0.38389,"score_date":"2026-10-23"},"published_at":"2026-10-15T08:53:33.117Z","modified_at":"2026-10-15T13:49:55.870Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-101290","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-15T13:49:55.870Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-101290","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.sick.com/psirt","tags":["x_SICK PSIRT Security Advisories"]},{"source":"CVE List","url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","tags":["x_SICK Operating Guidelines"]},{"source":"CVE List","url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","tags":["x_ICS-CERT recommended practices on Industrial Security"]},{"source":"CVE List","url":"https://www.first.org/cvss/calculator/3.1","tags":["x_CVSS v3.1 Calculator"]},{"source":"CVE List","url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0015.json","tags":["x_The canonical URL."]},{"source":"CVE List","url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0015.pdf","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-10-15T13:49:46.914507Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-15T13:49:55.870Z","content_hash":"5ca997b9c89366ecf430814d0c8ce83dbbe221b786ca84babae95c83d316d488"}}