CVE-2026-11845 HIGH

CVE-2026-11845: IEI Integration Corp|iVEC-IEI Virtualization Edge Computer - OS Command Injection

Vendor Iei Integration Corp
Product iVEC TANK-XM811
Weakness CWE-78
Published June 12, 2026
Last update June 12, 2026

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute them on the device.

Key dates

02Disclosure timeline

June 12, 2026 CVE published
June 12, 2026 Record updated