CVE-2026-26341

Katalog CVE

CVSS 9.8 · Critical EPSS 2,8%

Kerentanan Use of Default Credentials pada tattile smart+ firmware, tattile tolling+ firmware +8 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.

Rincian

Terbit di NVD

24 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1392: Use of Default Credentials

EPSS (30 hari)

2,8% peluang dieksploitasi; lebih tinggi dari 85,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/tattile-smart-vega-basic-default-credentials advisory pihak ketiga · vdb entry
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5977.php exploit · advisory pihak ketiga
• https://www.tattile.com/ product