CVE-2026-11844
MEDIUMIEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Read
Title source: cnaDescription
The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended directory scope.
References (2)
Core 2
Core References
Third Party Advisory third-party-advisory
https://www.twcert.org.tw/tw/cp-132-10969-4c4e2-1.html
Third Party Advisory third-party-advisory
https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html
Scores
CVSS v3
4.9
EPSS
0.0055
EPSS Percentile
41.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-22
Status
published
Products (1)
IEI Integration Corp/iVEC TANK-XM811
< 1.0.4
Published
Jun 12, 2026
Tracked Since
Jun 12, 2026