Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 20 products
| Date | Total | Labels |
|---|
| 2026-02-25 | 3 | Disclosure3 |
| 2026-02-26 | 1 | Disclosure1 |
| 2026-03-22 | 1 | Patch1 |
🚨 CVE-2026-26341 (CVSS 9.8): Firefox iOS address-bar desync lets malicious pages spoof any domain—perfect for phishing on mobile. Update ASAP. https://nvd.nist.gov/vuln/detail/CVE-2026-26341
Post summary
The tweet highlights a new high‑severity Firefox iOS vulnerability (CVE‑2026‑26341, CVSS 9.8) that can spoof domain names, and urges users to update promptly to prevent phishing.
🔴 CVE-2026-26341 - Critical Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. A... https://www.thehackerwire.com/vulnerability/CVE-2026-26341/ https://t.co/zuV22ytVRR
Post summary
The post announces CVE-2026-26341, noting that certain Tattile device firmware versions ship with default credentials that are not required to be changed, potentially exposing them to unauthorized access.
CVE-2026-26341 Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installatio… https://www.cve.org/CVERecord?id=CVE-2026-26341
Post summary
The CVE discloses that Tattile Smart+, Vega, and Basic device families ship with default credentials that are not required to be changed during installation, exposing a credential management flaw.
CVE-2026-26341 Default Credentials Vulnerability in Tattile Smart+ Devices Firmware 1.181.5 and Prior https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26341
Post summary
A default credentials vulnerability has been disclosed for Tattile Smart+ devices firmware 1.181.5 and earlier, with no mention of PoC, exploit, patch, or active exploitation.
🚨 CRITICAL: Default creds in Tattile Smart+, Vega, Basic devices (fw ≤1.181.5) allow admin takeover if exposed online. Act now: change passwords, restrict access! 🔒 https://radar.offseq.com/threat/cve-2026-26341-cwe-1392-use-of-default-credentials-b1797eea #OffSeq #IoTSecurity... https://t.co/DkgksKb4V6
Post summary
A critical vulnerability (CVE-2026-26341) in Tattile Smart+ and related devices allows admin takeover via default credentials; users are urged to change passwords and restrict access.
20 of 20 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tattile | anpr_mobile | - | - | - |
| OS | tattile | anpr_mobile_firmware | - | - | - |
| HW | tattile | axle_counter | - | - | - |
| OS | tattile | axle_counter_firmware | - | - | - |
| HW | tattile | basic_mk2 | - | - | - |
| OS | tattile | basic_mk2_firmware | - | - | - |
| HW | tattile | smart\+ | - | - | - |
| OS | tattile | smart\+_firmware | - | - | - |
| HW | tattile | smart\+_speed | - | - | - |
| OS | tattile | smart\+_speed_firmware | - | - | - |
| HW | tattile | smart\+_traffic_light | - | - | - |
| OS | tattile | smart\+_traffic_light_firmware | - | - | - |
| HW | tattile | tolling\+ | - | - | - |
| OS | tattile | tolling\+_firmware | - | - | - |
| HW | tattile | vega11 | - | - | - |
| OS | tattile | vega11_firmware | - | - | - |
| HW | tattile | vega33 | - | - | - |
| OS | tattile | vega33_firmware | - | - | - |
| HW | tattile | vega53 | - | - | - |
| OS | tattile | vega53_firmware | - | - | - |