CVE Catalog

CVE-2026-11849

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.08%

25th percentile — higher than 25% of all known CVEs

Summary

The iRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vulnerability, allowing unauthenticated remote attackers to exploit hard-coded credentials to gain administrative privileges on the database.

Risk Assessment

This vulnerability poses a significant risk to organizations by allowing remote attackers to gain access to sensitive data and systems, potentially leading to data loss or security breaches.

Recommendation

It is recommended to remove hard-coded credentials and implement strong authentication mechanisms to secure access to the system.

Original NVD description (English source)

The  iRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vulnerability, allowing unauthenticated remote attackers to exploit hard-coded credentials to gain administrative privileges on the database.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS