Tattile s.r.l.

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Tattile s.r.l. records in CISA KEV

No Tattile s.r.l. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Anpr Mobile Firmware 3 records HIGH Axle Counter Firmware 3 records HIGH Basic Mk2 Firmware 3 records HIGH Smart+ Firmware 3 records HIGH Smart+ Speed Firmware 3 records HIGH Smart+ Traffic Light Firmware 3 records HIGH Tolling+ Firmware 3 records HIGH Vega11 Firmware 3 records HIGH

Records

3 records in Basic Mk2 Firmware · all components

TI-2026-21297 CVE-2026-26341 · GHSA-682g-r279-6gq6

Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

HIGH 81

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02885 Published 2026-02-24 No fix listed CWE-1392

TI-2026-21296 CVE-2026-26340 · GHSA-c8xr-66ch-xcpx

Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure

HIGH 77

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00918 Published 2026-02-24 No fix listed CWE-306

TI-2026-21298 CVE-2026-26342 · GHSA-w6wm-hqx9-7cq8

Tattile Smart+ / Vega / Basic <= 1.181.5 Insufficient Session Token Expiration

HIGH 73

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00814 Published 2026-02-24 No fix listed CWE-613

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0