PatchTheCVEincoming goods suite vulnerabilities and fixes
Recent CVEs affecting incoming goods suite, with upgrade or downgrade steps. 3 tracked.
Also searched as: incominggoodssuite.
incoming goods suite has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-15. Highest priority: CVE-2026-22644 (score 35/100).
- CVE-2026-22646 MEDIUM 4.3 UPGRADE Certain error messages returned by the application expose internal system details that should not be visible t
- CVE-2026-22645 MEDIUM 5.3 UPGRADE The application discloses all used components, versions and license information to unauthenticated actors, giv
- CVE-2026-22644 MEDIUM 5.3 MITIGATE Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to t
FAQ
How do I fix incoming goods suite vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is incoming goods suite being exploited right now?
None of the tracked incoming goods suite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which incoming goods suite CVE should I patch first?
CVE-2026-22644 currently ranks highest (35/100): Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to t.