What is the CVSS score of CVE-2026-26342?

CVE-2026-26342 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Is there a public PoC exploit available for CVE-2026-26342?

Yes, a public proof-of-concept exploit is available for CVE-2026-26342. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2026-26342?

Within 24 hours: Inventory all Tattile Smart+, Vega, and Basic devices and isolate high-criticality units to air-gapped or restricted networks; document current firmware versions. Within 7 days: Implement network segmentation to limit device communication to essential systems only; enable enhanced logging for all device authentication attempts; rotate all administrative credentials. Within 30 days: Contact Tattile for patch availability timeline; evaluate replacement or upgrade options; conduct penetration testing on affected device access controls.

Anpr Mobile Firmware CVE-2026-26342

CRITICAL

Insufficient Session Expiration (CWE-613)

2026-02-24 disclosure@vulncheck.com

Authentication Bypass Anpr Mobile Firmware Axle Counter Firmware Basic Mk2 Firmware Smart Firmware Vega11 Firmware Vega33 Firmware Vega53 Firmware Tolling Firmware Smart Speed Firmware Smart Traffic Light Firmware Tattile

9.8

CVSS 3.1 · NVD

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Obtain valid X-User-Token via interception or log exposure
Exploit

Send authenticated requests with token to management interface
Execution

Access device functions and sensitive data
Impact

Execute unauthorized configuration or data manipulation

Vulnerability Assessment

Weakness	CWE CWE-613 OWASP Top 10:2025 A07:2025 - Authentication Failures ASVS 5.0 V7 - Session Management Session expiration enforcement
Exploitation Conditions	Tattile Smart+, Vega, or Basic device families running firmware version 1.181.5 or prior with valid X-User-Token obtained through interception, log exposure, or token reuse on shared systems. No special network configuration required for remote unauthenticated initial exploitation; token acquisition is the prerequisite.
Impact	CVSS 9.8, EPSS 0.31%. Combined with default credentials, a single login provides permanent access to the camera.
Exploit ScenarioDerived	Attacker obtains auth token (via default credentials or interception), retains permanent access to the ANPR camera system.

Act Now Prioritize within 24-48h. Why: CRITICAL severity + public POC available.

No patch listed yet 0.3% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Persistent authentication token in Tattile ANPR cameras firmware 1.181.5 and prior. Authentication tokens never expire, enabling indefinite session reuse. PoC available.

Earlier versions of this analysis (1)

v1 Mar 12, 2026 - 21:55 CVSS 9.8

Non-expiring auth tokens in Tattile ANPR cameras.

RemediationAI

Update firmware. Implement token expiration and rotation.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

CWE-613 insufficient session expiration. X-Auth-Token never expires once issued, allowing indefinite reuse.

Know when Anpr Mobile Firmware gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Feb 27, 2026 - 03:10 vuln.today

Public exploit code

CVE Published

Feb 24, 2026 - 20:27 nvd

CRITICAL 9.8

DescriptionCVE.org

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reuse on a shared system) can continue to authenticate to the management interface until the token is revoked, enabling unauthorized access to device functions and data.

Executive ViewAI

Why It Matters

Tattile Smart+ devices in your organization are vulnerable to authentication bypass attacks due to tokens that do not expire properly, allowing attackers to maintain unauthorized access indefinitely. This critical vulnerability affects all Tattile device families running firmware 1.181.5 or earlier and poses an immediate risk to operational technology environments, with active public exploits already available.

Business Impact: Severe

Compensating Controls

Segment Tattile devices to dedicated VLANs with strict egress filtering; implement WAF/IPS rules to detect and block token reuse patterns; require multi-factor authentication for all downstream systems accessed by these devices; enable comprehensive audit logging of all authentication tokens; consider temporary operational mode restrictions until patches are available; monitor for suspicious token usage patterns; disable remote access features where operationally feasible.

Threat Intelligence Overview

EPSS Score

0.3%

Top 46% exploitable

Exploit

POC

Public exploit code exists

Data Quality

3 sources

Confidence: Low

NVD

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC Yes

EPSS 0.3%

Patch available No

Active threat No

Deciding rule

CRITICAL severity + public POC available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.