CVE-2026-80469
Received Received - Intake

Malicious Driver Package Leads to Arbitrary Code Execution

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: SICK AG

Description
An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-11
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-80469
EUVD
EUVD-2026-76022

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
sick_ag device_manager 1.4.1
sick_ag sentio_creator to 2026.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an attacker to execute arbitrary code on a target system by uploading a malicious device driver package. It bypasses driver verification mechanisms, specifically improper cryptographic signature verification (CWE-347). User interaction is required for exploitation.

Detection Guidance

Detecting this vulnerability requires checking the version of the Device Manager extension in Sentio Creator. Compare installed versions against 1.4.1 or later. Inspect network traffic for unusual driver package uploads or unauthorized code execution attempts. Monitor system logs for anomalies related to device driver installations.

Impact Analysis

An attacker could gain full control over the affected system, leading to potential data breaches, system compromise, or disruption of operations. Confidentiality, integrity, and availability of the system may be severely impacted.

Mitigation Strategies

Immediately upgrade the Device Manager extension to version 1.4.1 or later. Restrict network access to Sentio Creator systems. Minimize exposure by isolating affected systems from untrusted networks. Review and enforce strict access controls for driver package uploads.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80469. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart