CVE-2026-26341

CRITICAL
2026-02-24 [email protected]
9.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
PoC Detected
Feb 26, 2026 - 17:31 vuln.today
Public exploit code
CVE Published
Feb 24, 2026 - 20:27 nvd
CRITICAL 9.8

Tags

Authentication Bypass Vega11 Firmware Axle Counter Firmware Vega33 Firmware Anpr Mobile Firmware Basic Mk2 Firmware Vega53 Firmware

Description

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.

Analysis

Default credentials in Tattile Smart+, Vega, and Basic ANPR camera families firmware 1.181.5 and prior. License plate recognition cameras ship with known default credentials. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Remediation

Within 24 hours: Inventory all Tattile Smart+, Vega, and Basic devices running firmware 1.181.5 or earlier; isolate affected devices to a restricted network segment and disable external connectivity. Within 7 days: Implement mandatory credential change procedures through administrative interfaces if supported; deploy network access controls (802.1X, firewall rules) limiting device access to authorized personnel only. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Priority Score

69
Low Medium High Critical
KEV: 0
EPSS: +0.1
CVSS: +49
POC: +20

Share

CVE-2026-26341 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy