Arbitrary File Deletion Vulnerability in iVEC-IEI Virtualization Edge Computer by IEI Integration Corp
CVE-2026-11846

7.2HIGH

Key Information:

Vendor

Iei Integration Corp

Status
Ivec Tank-xm811
Vendor
CVE Published:
12 June 2026

What is CVE-2026-11846?

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp is susceptible to an arbitrary file deletion vulnerability. This issue can be exploited by authenticated remote attackers, potentially allowing them to delete critical system files or directories. Such actions could lead to significant data loss or disruption of services, making it essential for users and administrators to take preventive measures against potential exploitation.

Affected Version(s)

iVEC TANK-XM811 0 < 1.0.4

References

https://www.twcert.org.tw/tw/cp-132-10969-4c4e2-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html
third-party-advisory

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.