Unrated severityNVD Advisory· Published Feb 24, 2026· Updated Mar 5, 2026

Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

CVE-2026-26341

Description

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.

Affected products

Calendarix/Basicllm-fuzzy
Range: <=1.181.5
Vega/Vegallm-fuzzy
Range: <=1.181.5
Tattile S.r.l./Smart+llm-fuzzy2 versions
<=1.181.5+ 1 more
- (no CPE)range: <=1.181.5
- (no CPE)range: 0
Tattile S.r.l./Vega53v5
Range: 0
Tattile S.r.l./Vega11v5
Range: 0
Tattile S.r.l./Smart+ Speedv5
Range: 0
Tattile s.r.l./Smart+ Traffic Lightv5
Range: 0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5977.phpmitretechnical-descriptionexploit
www.vulncheck.com/advisories/tattile-smart-vega-basic-default-credentialsmitrethird-party-advisory
www.tattile.commitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.011
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000