🔐 CVE Alert

CVE-2026-11845

HIGH 7.2

IEI Integration Corp|iVEC-IEI Virtualization Edge Computer - OS Command Injection

CVSS Score
7.2
EPSS Score
0.0%
EPSS Percentile
0th

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute them on the device.

CWE CWE-78
Vendor iei integration corp
Product ivec tank-xm811
Published Jun 12, 2026
Last Updated Jun 12, 2026
Stay Ahead of the Next One

Get instant alerts for iei integration corp ivec tank-xm811

Be the first to know when new high vulnerabilities affecting iei integration corp ivec tank-xm811 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

IEI Integration Corp / iVEC TANK-XM811
0 < 1.0.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗
twcert.org.tw: https://www.twcert.org.tw/tw/cp-132-10969-4c4e2-1.html twcert.org.tw: https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html