What is the CVSS score of CVE-2026-26341?

CVE-2026-26341 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2026-26341?

Yes, a public proof-of-concept exploit is available for CVE-2026-26341. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-26341?

Within 24 hours: Inventory all Tattile Smart+, Vega, and Basic devices running firmware 1.181.5 or earlier; isolate affected devices to a restricted network segment and disable external connectivity. Within 7 days: Implement mandatory credential change procedures through administrative interfaces if supported; deploy network access controls (802.1X, firewall rules) limiting device access to authorized personnel only. Within 30 days: Contact Tattile for patch availability and timeline; evaluate replacement or decommissioning of devices if patches remain unavailable; implement continuous monitoring for unauthorized access attempts.

Anpr Mobile Firmware CVE-2026-26341

CRITICAL

Use of Default Credentials (CWE-1392)

2026-02-24 disclosure@vulncheck.com

Authentication Bypass Anpr Mobile Firmware Axle Counter Firmware Basic Mk2 Firmware Smart Firmware Vega11 Firmware Vega33 Firmware Vega53 Firmware Tolling Firmware Smart Speed Firmware Smart Traffic Light Firmware Tattile

9.8

CVSS 3.1 · NVD

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Discover management interface on network
Exploit

Authenticate with default credentials
Execution

Gain administrative access
Impact

Modify device configuration

Vulnerability Assessment

Weakness	CWE CWE-1392 OWASP Top 10:2025 A07:2025 - Authentication Failures ASVS 5.0 V6 - Authentication Default credential prevention
Exploitation Conditions	Network access to management interface on Tattile Smart+, Vega, or Basic device families with firmware version 1.181.5 or prior. Default credentials must not be changed during installation or commissioning.
Impact	CVSS 9.8, EPSS 0.13%. ANPR cameras with default credentials expose license plate surveillance data and camera controls.
Exploit ScenarioDerived	Attacker logs into Tattile ANPR camera with default credentials, accesses license plate recognition data, modifies camera configuration, or uses as network pivot.

Act Now Prioritize within 24-48h. Why: CRITICAL severity + public POC available.

No patch listed yet 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Default credentials in Tattile Smart+, Vega, and Basic ANPR camera families firmware 1.181.5 and prior. License plate recognition cameras ship with known default credentials. PoC available.

Earlier versions of this analysis (1)

v1 Mar 12, 2026 - 21:55 CVSS 9.8

Default credentials in Tattile ANPR cameras.

RemediationAI

Change default credentials. Update firmware. Restrict camera management to dedicated management network.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

CWE-1392 default credentials across multiple Tattile camera product families. Automatic Number Plate Recognition cameras used in law enforcement and parking.

Know when Anpr Mobile Firmware gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Feb 26, 2026 - 17:31 vuln.today

Public exploit code

CVE Published

Feb 24, 2026 - 20:27 nvd

CRITICAL 9.8

DescriptionCVE.org

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.

Executive ViewAI

Why It Matters

Tattile Smart+ devices in our environment are exposed to critical remote compromise via hardcoded default credentials that cannot be changed during setup. An attacker with network access can gain full device control without authentication, potentially disrupting operations, compromising data integrity, and enabling lateral movement into connected systems.

Business Impact: Severe

Compensating Controls

Network segmentation: restrict device access via VLAN isolation and firewall rules to trusted networks only; Disable remote management protocols (SSH, Telnet, HTTP admin) at network perimeter if functionality permits; Monitor all connections to affected devices for suspicious authentication patterns; Implement IDS/IPS rules targeting common exploitation attempts on Tattile devices; Require VPN access for any remote administration; Deploy network access control (NAC) to prevent unauthorized device communication; Document and limit which systems and users can communicate with these devices.

Threat Intelligence Overview

EPSS Score

0.1%

Top 68% exploitable

Exploit

POC

Public exploit code exists

Data Quality

3 sources

Confidence: Low

NVD

CVE.org

EPSS POC (1)

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC Yes

EPSS 0.1%

Patch available No

Active threat No

Deciding rule

CRITICAL severity + public POC available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.