CVE-2026-11849: IEI Integration Corp｜iRM-IEI Remote Management - Hard-coded Credentials

Synopsis

A hard-coded credentials vulnerability exists in IEI Integration Corp's iRM-IEI Remote Management software. The flaw is reachable over the network with no authentication required, and the embedded credentials are identical across every affected deployment. Successful exploitation gives an attacker administrative privileges on the database, enabling full read, write, and availability control over its contents. A patched-image rebuild at version 1.4.19 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the iRM-IEI Remote Management service over the network; no physical or local access is required.

• AuthenticationNot required

  No credentials or account are needed before exploitation; the hard-coded credentials themselves are the mechanism of attack.

• Victim interactionNot required

  The attacker acts entirely on their own; no user action or social engineering is needed.

• Attack complexityDetail

  The exploit is reliable and condition-free; no race conditions, memory layout dependencies, or environmental factors must be satisfied.

Blast Radius

• Attacker obtains administrative access to the database and reads all stored records, which may include credentials, configuration data, and application state.
• Attacker modifies or deletes persisted database rows, corrupting application data or creating backdoor accounts.
• Attacker disrupts database availability, taking the iRM-IEI Remote Management service offline.