Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

published 2026-02-24 8 mo ago modified 2026-06-17 4 mo ago also EUVD-2026-8551

cvss: 9.8; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 2.9%; EPSS 2.9% chance of exploitation in 30 days, percentile 86%
public exploits: 0; none known, plus a Nuclei check

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.

CISA SSVC

Exploitation: Proof of concept is public
Automatable: yes
Technical impact: total
Assessed: 8 mo ago (2026-02-24)

Exploit prediction

2.89% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Nuclei template Tattile Camera < 1.181.5 - Default Login nuclei detection template
zeroscience.mk https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5977.php referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	4.0	9.3	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA	4.0	9.3	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Tattile s.r.l. Smart+
Tattile s.r.l. Tolling+
Tattile s.r.l. Smart+ Speed
Tattile s.r.l. Smart+ Traffic Light
Tattile s.r.l. Axle Counter
Tattile s.r.l. Vega53
Tattile s.r.l. Vega33
Tattile s.r.l. Vega11
Tattile s.r.l. Basic MK2
Tattile s.r.l. ANPR Mobile

Classification

Weakness

CWE-1392 Use of Default Credentials

References

zeroscience.mk /en/vulnerabilities/ZSL-2026-5977.php
technical-description, exploit, third-party-advisory
tattile.com /
product
vulncheck.com /advisories/tattile-smart-vega-basic-default-credentials
third-party-advisory, vdb-entry

Sources

CVE List CVE-2026-26341
NVD CVE-2026-26341

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary