critical·Exposed Panels·Updated May 11, 2026

Tattile Camera < 1.181.5 - Default Login

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2026-26341

9.3

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

Smart+by Tattile s.r.l.

Tolling+by Tattile s.r.l.

Smart+ Speedby Tattile s.r.l.

Smart+ Traffic Lightby Tattile s.r.l.

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Tattile Camera < 1.181.5 - Default Login

Check your infrastructure.Right now.

Check your infrastructure.
Right now.