CVE-2026-26340
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data.
Vendor
Product
CWE
Yayın Tarihi
2026-02-24 20:27:47
Güncelleme
2026-02-26 17:38:44
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-