Arbitrary File Read Vulnerability in iVEC-IEI Virtualization Edge Computer by IEI Integration Corp
CVE-2026-11844

6.9MEDIUM

Key Information:

Vendor

Iei Integration Corp

Status
Ivec Tank-xm811
Vendor
CVE Published:
12 June 2026

What is CVE-2026-11844?

The iVEC-IEI Virtualization Edge Computer produced by IEI Integration Corp is affected by a vulnerability that allows privileged remote attackers to read files from locations that should be inaccessible. This flaw can potentially lead to unauthorized access to sensitive information, making it critical for users to be aware of the risks and implement necessary security measures to safeguard their systems.

Affected Version(s)

iVEC TANK-XM811 0 < 1.0.4

References

https://www.twcert.org.tw/tw/cp-132-10969-4c4e2-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.