CVE-2026-11845
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute them on the device.
Risk Assessment
Attackers could gain full control over the device, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update the device's software and implement appropriate security measures to minimize the risk of an attack.
Other vulnerabilities in iVEC-IEI Virtualization Edge Computer
See all- CVE-2026-11847Medium
The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerability to create directories in unintended system paths.
- CVE-2026-11846High
The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit this vulnerability to delete arbitrary system files or directories, resulting in data destruction or service disruption.
- CVE-2026-11844Medium
The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended directory scope.
Original NVD description (English source)
The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute them on the device.