Path Traversal Vulnerability in iVEC-IEI Virtualization Edge Computer by IEI Integration Corp
CVE-2026-11847

5.3MEDIUM

Key Information:

Vendor

Iei Integration Corp

Status
Ivec Tank-xm811
Vendor
CVE Published:
12 June 2026

What is CVE-2026-11847?

The iVEC-IEI Virtualization Edge Computer from IEI Integration Corp is susceptible to a path traversal vulnerability. This issue allows authenticated remote attackers to exploit the system and create directories in unintended locations, potentially compromising system integrity and facilitating unauthorized access. Implementing security measures is essential to mitigate risks associated with this vulnerability.

Affected Version(s)

iVEC TANK-XM811 0 < 1.0.4

References

https://www.twcert.org.tw/tw/cp-132-10969-4c4e2-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.