Vulnerabilities

TI-2026-21298 CVE-2026-26342 · GHSA-w6wm-hqx9-7cq8

Tattile Smart+ / Vega / Basic <= 1.181.5 Insufficient Session Token Expiration

HIGH 73

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00814 Published 2026-02-24 No fix listed CWE-613

TI-2026-21297 CVE-2026-26341 · GHSA-682g-r279-6gq6

Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

HIGH 81

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02885 Published 2026-02-24 No fix listed CWE-1392

TI-2026-21296 CVE-2026-26340 · GHSA-c8xr-66ch-xcpx

Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure

HIGH 77

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00918 Published 2026-02-24 No fix listed CWE-306

Vulnerabilities

Filters

Tattile Smart+ / Vega / Basic <= 1.181.5 Insufficient Session Token Expiration

Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure