TVN ID	TVN-202606005
CVE ID	CVE-2026-11848, CVE-2026-11849
CVSS	【CVE-2026-11848】 5.3 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 【CVE-2026-11849】 9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	iRM-TSi410X before version v1.4.19
Description	【CVE-2026-11848(Missing Authentication)】 Unauthenticated remote attackers can exploit a specific functionality to obtain partial system configuration information. 【CVE-2026-11849((Hardcoded Credentials))】 Unauthenticated remote attackers to exploit hard-coded credentials to gain administrative privileges on the database.
Solution	Update iRM TSi410X to version v1.4.19 or later
Public Date	2026-06-12