CVE-2026-11846 | THREATINT

Description

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit this vulnerability to delete arbitrary system files or directories, resulting in data destruction or service disruption.

PUBLISHED Reserved 2026-06-10 | Published 2026-06-12 | Updated 2026-06-12 | Assigner twcert

HIGH: 7.2CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

HIGH: 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Problem types

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)

Product status

Default status

unaffected

Any version before 1.0.4

affected

References

www.twcert.org.tw/tw/cp-132-10969-4c4e2-1.html third-party-advisory

www.twcert.org.tw/en/cp-139-10970-e4b21-2.html third-party-advisory

cve.org (CVE-2026-11846)

nvd.nist.gov (CVE-2026-11846)

Download JSON