CVE-2026-26342

CVE-2026-26342 affects Tattile Smart+, Vega, and Basic device families running firmware versions 1.181.5 and prior. The vulnerability stems from an authentication token (X-User-Token) with insufficient expiration, allowing an attacker to maintain unauthorized access to the management interface once a valid token is acquired. Rated Critical with a CVSS score of 9.8, this flaw presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.