Read the docs
TI-2026-10222 Aliases CVE-2026-11846GHSA-cw7v-g93w-6325

IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Deletion

Priority LOW 32CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

The  iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit this vulnerability to delete arbitrary system files or directories,  resulting in data destruction or service disruption.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00401 34th percentileScored 2026-11-07
Fix Fixed iVEC TANK-XM811 (IEI Integration Corp): 1.0.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IEI Integration CorpiVEC TANK-XM811before 1.0.41.0.4Patch availableCNA

Remediation

  • Fix · CNA iVEC TANK-XM811 (IEI Integration Corp) Fixed in 1.0.4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    IEI Integration iVEC TANK-XM811 1.0.4

    4 records Highest priority Priority MEDIUM 1 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2026-10221 IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - OS Command InjectionPriority MEDIUM 41
    • TI-2026-10220 IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File ReadPriority LOW 31
    • TI-2026-10223 Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File DeletionPriority LOW 24
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-11846
  2. 2026-10-03 Alias added: GHSA-cw7v-g93w-6325

References

Advisory 2

  • TI-2026-10225 IEI Integration Corp｜iRM-IEI Remote Management - Hard-coded Credentials CVSS 4.0CRITICAL 9.3
  • TI-2026-10221 IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - OS Command Injection CVSS 4.0HIGH 8.6
  • TI-2026-10224 IEI Integration Corp｜ iRM-IEI Remote Management - Missing Authentication CVSS 4.0HIGH 7.9
  • TI-2026-10220 IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Read CVSS 4.0MEDIUM 6.9
  • TI-2026-10223 Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Deletion CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences