Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Sign Up →
CVE

CVE-2026-26341

9.3
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
smart+tolling+smart+ speedsmart+ traffic lightaxle countervega53
Updated Nov 10, 2026View on NVD →
S4E scanner
criticalExposed Panels~10 seconds

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware References: https://www.cve.org/CVERecord?id=CVE-2026-26341 Remediation: Update firmware to a version later than 1.181.5 or the latest available version.

Used 20 times · 10 assets checked · domain, subdomain, ipv4

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →