OS Command Injection Vulnerability in iVEC-IEI Virtualization Edge Computer by IEI Integration Corp
CVE-2026-11845

8.6HIGH

Key Information:

Vendor
CVE Published:
12 June 2026

What is CVE-2026-11845?

The iVEC-IEI Virtualization Edge Computer, developed by IEI Integration Corp, is susceptible to an OS Command Injection vulnerability. This weakness permits privileged remote attackers to inject arbitrary operating system commands, which can then be executed on the affected device. Such exploitation poses significant risks, including unauthorized access to sensitive data and control over the affected systems. Timely patching and cybersecurity measures are essential to mitigate these threats.

Affected Version(s)

iVEC TANK-XM811 0 < 1.0.4

References

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.