Findings

CVE-2026-1626

An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communicati…

Published Feb 27, 2026 · updated Jun 17, 2026 · sick lms1000 firmware

An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 27, 2026 · NIST NVD

    Detected

    An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.

  2. Jun 17, 2026 · NIST NVD

    Updated

    An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.

Affected

  • cpe sick/lms1000 firmwareversion unspecified
  • cpe sick/mrs1000 firmwareversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-1626

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-1626

    An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.

    nvd.nist.gov

References