← Database

CVE-2026-26340

HIGH CVSS: 7.5 Published: 2026-02-24 Modified: 2026-06-17

Description

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data.

Affected Platforms

Tattile Vega33Tattile Smart\+ Speed FirmwareTattile Smart\+ FirmwareTattile Tolling\+ FirmwareTattile Vega33 FirmwareTattile Smart\+ Traffic LightTattile Smart\+ SpeedTattile Smart\+Tattile Axle CounterTattile Vega11

Weakness Type

CWE-306

References