Unrated severityNVD Advisory· Published Feb 24, 2026· Updated Mar 5, 2026
Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure
CVE-2026-26340
Description
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- Range: <=1.181.5
<=1.181.5+ 2 more
- (no CPE)range: <=1.181.5
- (no CPE)range: 0
- (no CPE)range: 0
- Range: 0
- Range: 0
- Tattile s.r.l./Smart+ Traffic Lightv5Range: 0
Patches
Vulnerability mechanics
References
3- www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5978.phpmitretechnical-descriptionexploit
- www.vulncheck.com/advisories/tattile-smart-vega-basic-unauthenticated-rtsp-stream-disclosuremitrethird-party-advisory
- www.tattile.commitreproduct
News mentions
0No linked articles in our index yet.