Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
6 vulnerabilities found for basic_mk2_firmware by tattile
CVE-2026-26341 (GCVE-0-2026-26341)
Vulnerability from nvd – Published: 2026-02-24 18:40 – Updated: 2026-03-05 01:31
VLAI
Title
Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials
Summary
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-1392 - Use of Default Credentials
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.zeroscience.mk/en/vulnerabilities/ZSL… | technical-descriptionexploit |
| https://www.tattile.com/ | product |
| https://www.vulncheck.com/advisories/tattile-smar… | third-party-advisory |
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tattile s.r.l. | Smart+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Tolling+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Speed |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Traffic Light |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Axle Counter |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega53 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega33 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega11 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Basic MK2 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | ANPR Mobile |
Affected:
0 , ≤ 1.181.5
(semver)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-26341",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-24T21:32:49.052176Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-24T21:33:18.810Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Tolling+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Speed",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Traffic Light",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Axle Counter",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega53",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega33",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega11",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Basic MK2",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ANPR Mobile",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:iptime:smart_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.181.5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gjoko Krstic of Zero Science Lab"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data."
}
],
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1392",
"description": "CWE-1392 Use of Default Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-05T01:31:06.767Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5977.php"
},
{
"tags": [
"product"
],
"url": "https://www.tattile.com/"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-default-credentials"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Tattile Smart+ / Vega / Basic \u003c= 1.181.5 Default Credentials",
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-26341",
"datePublished": "2026-02-24T18:40:54.212Z",
"dateReserved": "2026-02-13T17:28:43.054Z",
"dateUpdated": "2026-03-05T01:31:06.767Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-26342 (GCVE-0-2026-26342)
Vulnerability from nvd – Published: 2026-02-24 18:41 – Updated: 2026-03-05 01:31
VLAI
Title
Tattile Smart+ / Vega / Basic <= 1.181.5 Insufficient Session Token Expiration
Summary
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reuse on a shared system) can continue to authenticate to the management interface until the token is revoked, enabling unauthorized access to device functions and data.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-613 - Insufficient Session Expiration
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.zeroscience.mk/en/vulnerabilities/ZSL… | technical-descriptionexploit |
| https://www.tattile.com/ | product |
| https://www.vulncheck.com/advisories/tattile-smar… | third-party-advisory |
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tattile s.r.l. | Smart+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Tolling+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Speed |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Traffic Light |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Axle Counter |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega53 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega33 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega11 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Basic MK2 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | ANPR Mobile |
Affected:
0 , ≤ 1.181.5
(semver)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-26342",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-26T19:34:16.951778Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T19:58:40.958Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Tolling+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Speed",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Traffic Light",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Axle Counter",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega53",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega33",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega11",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Basic MK2",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ANPR Mobile",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:iptime:smart_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.181.5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gjoko Krstic of Zero Science Lab"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reuse on a shared system) can continue to authenticate to the management interface until the token is revoked, enabling unauthorized access to device functions and data."
}
],
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reuse on a shared system) can continue to authenticate to the management interface until the token is revoked, enabling unauthorized access to device functions and data."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-613",
"description": "CWE-613 Insufficient Session Expiration",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-05T01:31:07.547Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5976.php"
},
{
"tags": [
"product"
],
"url": "https://www.tattile.com/"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-insufficient-session-token-expiration"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Tattile Smart+ / Vega / Basic \u003c= 1.181.5 Insufficient Session Token Expiration",
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-26342",
"datePublished": "2026-02-24T18:41:09.935Z",
"dateReserved": "2026-02-13T17:28:43.054Z",
"dateUpdated": "2026-03-05T01:31:07.547Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-26340 (GCVE-0-2026-26340)
Vulnerability from nvd – Published: 2026-02-24 18:40 – Updated: 2026-03-05 01:31
VLAI
Title
Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure
Summary
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.zeroscience.mk/en/vulnerabilities/ZSL… | technical-descriptionexploit |
| https://www.tattile.com/ | product |
| https://www.vulncheck.com/advisories/tattile-smar… | third-party-advisory |
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tattile s.r.l. | Smart+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Tolling+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Speed |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Traffic Light |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Axle Counter |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega53 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega33 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega11 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Basic MK2 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | ANPR Mobile |
Affected:
0 , ≤ 1.181.5
(semver)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-26340",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-24T21:33:55.002164Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-24T21:34:06.523Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Tolling+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Speed",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Traffic Light",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Axle Counter",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega53",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega33",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega11",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Basic MK2",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ANPR Mobile",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:iptime:smart_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.181.5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gjoko Krstic of Zero Science Lab"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data."
}
],
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-05T01:31:05.967Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5978.php"
},
{
"tags": [
"product"
],
"url": "https://www.tattile.com/"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-unauthenticated-rtsp-stream-disclosure"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Tattile Smart+ / Vega / Basic \u003c= 1.181.5 Unauthenticated RTSP Stream Disclosure",
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-26340",
"datePublished": "2026-02-24T18:40:35.393Z",
"dateReserved": "2026-02-13T17:28:43.053Z",
"dateUpdated": "2026-03-05T01:31:05.967Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-26342 (GCVE-0-2026-26342)
Vulnerability from cvelistv5 – Published: 2026-02-24 18:41 – Updated: 2026-03-05 01:31
VLAI
Title
Tattile Smart+ / Vega / Basic <= 1.181.5 Insufficient Session Token Expiration
Summary
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reuse on a shared system) can continue to authenticate to the management interface until the token is revoked, enabling unauthorized access to device functions and data.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-613 - Insufficient Session Expiration
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.zeroscience.mk/en/vulnerabilities/ZSL… | technical-descriptionexploit |
| https://www.tattile.com/ | product |
| https://www.vulncheck.com/advisories/tattile-smar… | third-party-advisory |
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tattile s.r.l. | Smart+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Tolling+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Speed |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Traffic Light |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Axle Counter |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega53 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega33 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega11 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Basic MK2 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | ANPR Mobile |
Affected:
0 , ≤ 1.181.5
(semver)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-26342",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-26T19:34:16.951778Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T19:58:40.958Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Tolling+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Speed",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Traffic Light",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Axle Counter",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega53",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega33",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega11",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Basic MK2",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ANPR Mobile",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:iptime:smart_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.181.5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gjoko Krstic of Zero Science Lab"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reuse on a shared system) can continue to authenticate to the management interface until the token is revoked, enabling unauthorized access to device functions and data."
}
],
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reuse on a shared system) can continue to authenticate to the management interface until the token is revoked, enabling unauthorized access to device functions and data."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-613",
"description": "CWE-613 Insufficient Session Expiration",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-05T01:31:07.547Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5976.php"
},
{
"tags": [
"product"
],
"url": "https://www.tattile.com/"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-insufficient-session-token-expiration"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Tattile Smart+ / Vega / Basic \u003c= 1.181.5 Insufficient Session Token Expiration",
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-26342",
"datePublished": "2026-02-24T18:41:09.935Z",
"dateReserved": "2026-02-13T17:28:43.054Z",
"dateUpdated": "2026-03-05T01:31:07.547Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-26341 (GCVE-0-2026-26341)
Vulnerability from cvelistv5 – Published: 2026-02-24 18:40 – Updated: 2026-03-05 01:31
VLAI
Title
Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials
Summary
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-1392 - Use of Default Credentials
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.zeroscience.mk/en/vulnerabilities/ZSL… | technical-descriptionexploit |
| https://www.tattile.com/ | product |
| https://www.vulncheck.com/advisories/tattile-smar… | third-party-advisory |
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tattile s.r.l. | Smart+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Tolling+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Speed |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Traffic Light |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Axle Counter |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega53 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega33 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega11 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Basic MK2 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | ANPR Mobile |
Affected:
0 , ≤ 1.181.5
(semver)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-26341",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-24T21:32:49.052176Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-24T21:33:18.810Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Tolling+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Speed",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Traffic Light",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Axle Counter",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega53",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega33",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega11",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Basic MK2",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ANPR Mobile",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:iptime:smart_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.181.5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gjoko Krstic of Zero Science Lab"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data."
}
],
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1392",
"description": "CWE-1392 Use of Default Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-05T01:31:06.767Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5977.php"
},
{
"tags": [
"product"
],
"url": "https://www.tattile.com/"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-default-credentials"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Tattile Smart+ / Vega / Basic \u003c= 1.181.5 Default Credentials",
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-26341",
"datePublished": "2026-02-24T18:40:54.212Z",
"dateReserved": "2026-02-13T17:28:43.054Z",
"dateUpdated": "2026-03-05T01:31:06.767Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-26340 (GCVE-0-2026-26340)
Vulnerability from cvelistv5 – Published: 2026-02-24 18:40 – Updated: 2026-03-05 01:31
VLAI
Title
Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure
Summary
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.zeroscience.mk/en/vulnerabilities/ZSL… | technical-descriptionexploit |
| https://www.tattile.com/ | product |
| https://www.vulncheck.com/advisories/tattile-smar… | third-party-advisory |
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tattile s.r.l. | Smart+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Tolling+ |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Speed |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Smart+ Traffic Light |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Axle Counter |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega53 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega33 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Vega11 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | Basic MK2 |
Affected:
0 , ≤ 1.181.5
(semver)
|
|
| Tattile s.r.l. | ANPR Mobile |
Affected:
0 , ≤ 1.181.5
(semver)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-26340",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-24T21:33:55.002164Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-24T21:34:06.523Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Smart+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Tolling+",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Speed",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Smart+ Traffic Light",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Axle Counter",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega53",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega33",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Vega11",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Basic MK2",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ANPR Mobile",
"vendor": "Tattile s.r.l.",
"versions": [
{
"lessThanOrEqual": "1.181.5",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:iptime:smart_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.181.5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gjoko Krstic of Zero Science Lab"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data."
}
],
"value": "Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-05T01:31:05.967Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5978.php"
},
{
"tags": [
"product"
],
"url": "https://www.tattile.com/"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tattile-smart-vega-basic-unauthenticated-rtsp-stream-disclosure"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Tattile Smart+ / Vega / Basic \u003c= 1.181.5 Unauthenticated RTSP Stream Disclosure",
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-26340",
"datePublished": "2026-02-24T18:40:35.393Z",
"dateReserved": "2026-02-13T17:28:43.053Z",
"dateUpdated": "2026-03-05T01:31:05.967Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}