TWCERT Advisory: IEI iVEC Virtualization Edge Computer 4 Vulnerabilities (CVE-2026-11844/45/46/47)

Vulnerability Overview Vulnerability Name: IEI威強電工業電腦 Vulnerability ID: TVN-20260604 CVE ID: CVE-2026-11844, CVE-2026-11845, CVE-2026-11846, CVE-2026-11847 CVSS Score: - CVE-2026-11844: 4.9 (Medium) - CVE-2026-11845: 7.2 (High) - CVE-2026-11846: 8.1 (High) - CVE-2026-11847: 4.3 (Medium) Affected Scope Affected Product: iVEC TANK-XM811 version prior to v1.0.4 Problem Description CVE-2026-11844 (Arbitrary File Read): A remote attacker with administrative privileges can exploit this vulnerability to access files outside the expected directory scope. CVE-2026-11845 (OS Command Injection): A remote attacker with administrative privileges can inject arbitrary operating system commands and execute them on the device. CVE-2026-11846 (Arbitrary File Deletion): A remote attacker who has passed authentication can exploit this vulnerability to delete arbitrary system files or directories, resulting in data corruption or service interruption. CVE-2026-11847 (Path Traversal): A remote attacker who has passed authentication can exploit this vulnerability to create directories at unexpected system paths. Remediation Solution: Upgrade to iVEC TANK-XM811 version v1.0.4 or later. Disclosure Date Publication Date: 2026-06-12 Related Links 1. CVE-2026-11844 2. CVE-2026-11845 3. CVE-2026-11846 4. CVE-2026-11847 Additional Information Last Updated: 2026-06-12 Total Views: 29320237 Contact Information TWCERT/CC Service Email: cert_service(at)cert.org.tw Corporate Security Incident Reporting Email: int_import(at)cert.org.tw CVE Reporting Email: cve(at)cert.org.tw PGP KEY TWCERT/CC PGP Public Key Key ID: 0x1E9D1F1B Legal Statement TLP:CLEAR Copyright © TWCERT/CC Taiwan Computer Network Emergency Response Coordination Center 1998-2025 Recommended minimum browsing resolution is 1024x768 or higher

Goal Reached Thanks to every supporter — we hit 100%!

TWCERT Advisory: IEI iVEC Virtualization Edge Computer 4 Vulnerabilities (CVE-2026-11844/45/46/47)