These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-11849 is a critical vulnerability in the iRM-IEI Remote Management developed by IEI Integration Corp. The vulnerability is caused by hardcoded credentials, which allow unauthenticated remote attackers to gain administrative privileges on the database. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 9.3, indicating a critical severity.
CVE-2026-11848 is a HIGH severity vulnerability with a CVSS score of 7.9. The iRM-IEI Remote Management developed by IEI Integration Corp has a Missing Authentication vulnerability. This vulnerability allows unauthenticated remote attackers to exploit a specific functionality to obtain partial system configuration information.
CVE-2026-11847 is a Path Traversal vulnerability in the iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp. This vulnerability allows authenticated remote attackers to create directories in unintended system paths. The CVSS score for this vulnerability is 5.3, which is considered MEDIUM severity.
CVE-2026-11846 is a HIGH-severity vulnerability in the iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp. The vulnerability allows authenticated remote attackers to delete arbitrary system files or directories, resulting in data destruction or service disruption. The CVSS score for this vulnerability is 7.2.
CVE-2026-11845 is an OS Command Injection vulnerability in the iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp. This vulnerability allows privileged remote attackers to inject arbitrary OS commands and execute them on the device. The vulnerability has a CVSS score of 8.6 and is classified as HIGH severity.
CVE-2026-11844 is a MEDIUM-severity vulnerability in the iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp. It allows privileged remote attackers to access files outside the intended directory scope, classified as CWE-22.