Skip to content

Vendor

intelbras vulnerabilities

61 published CVES affecting intelbras, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
61
Critical
8
High
28
Medium
23
Low
2
Unscored
0
CISA KEV
0
Atom feed of intelbras alerts

Products

Latest intelbras CVEs

Newest publication first · page 1 of 3

  2. CVE-2026-101265 Intelbras TIP 125i Básico sensitive information in source

    Published
    LowCVSS 2.3 EPSS 0.26%

    A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation leads to inclusion of sensitive information in source code. The attack can be launched remotely. A high complexity level...

  3. CVE-2026-12211 Intelbras iNVU 7016 FT Web syslog path traversal

    Published
    MediumCVSS 5.1 EPSS 0.37%

    A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the component Web Interface. Executing a manipulation can lead to path traversal. The attack can be launched remotely. The ex...

  5. CVE-2026-3101 Intelbras TIP 635G Ping os command injection

    Published
    MediumCVSS 5.3 EPSS 6.6%

    A vulnerability was found in Intelbras TIP 635G 1.12.3.5. This vulnerability affects unknown code of the component Ping Handler. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor w...

  6. CVE-2026-2564 Intelbras VIP 3260 Z IA OutsideCmd password recovery

    Published
    CriticalCVSS 9.2 EPSS 0.55%

    A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this...

  7. CVE-2020-36963 Intelbras Router RF 301K 1.1.2 - Authentication Bypass

    Published
    HighCVSS 8.7 EPSS 0.41%

    Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive...

  8. CVE-2025-13221 Intelbras UnniTI usuarios.xml credentials storage

    Published
    MediumCVSS 6.9 EPSS 0.39%

    A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manipulation of the argument Usuario/Senha can lead to unprotected storage of credentials. The attack can be executed remotely...

  9. CVE-2025-13187 Intelbras ICIP acessodeusuario.xml credentials storage

    Published
    MediumCVSS 6.9 EPSS 0.57%

    A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of credentials. The attack may be launched remo...

  11. CVE-2025-8515 Intelbras InControl JSON Endpoint operador information disclosure

    Published
    LowCVSS 2.3 EPSS 0.32%

    A weakness has been identified in Intelbras InControl 2.21.60.9. This vulnerability affects unknown code of the file /v1/operador/ of the component JSON Endpoint. Executing manipulation can lead to information disclosure. It is possible to launch the attack remotely. A high compl...

  16. CVE-2025-7061 Intelbras InControl operador csv injection

    Published
    MediumCVSS 5.1 EPSS 0.34%

    A vulnerability was found in Intelbras InControl up to 2.21.60.9. It has been declared as problematic. This vulnerability affects unknown code of the file /v1/operador/. The manipulation leads to csv injection. The attack can be initiated remotely. The exploit has been disclosed...

  17. CVE-2025-50404 Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing t...

    Published
    MediumCVSS 5.3 EPSS 9.9%

    Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing the array to cross the boundary and overwrite other fields in the array.

  19. CVE-2025-6765 Intelbras InControl HTTP PUT Request operador permission

    Published
    MediumCVSS 5.3 EPSS 0.44%

    A vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60.9. This issue affects some unknown processing of the file /v1/operador/ of the component HTTP PUT Request Handler. The manipulation leads to permission issues. The attack may be initi...

  20. CVE-2025-4996 Intelbras RF 301K Add Static IP cross site scripting

    Published
    MediumCVSS 4.8 EPSS 0.32%

    A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5. This issue affects some unknown processing of the component Add Static IP. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remo...

  21. CVE-2025-4286 Intelbras InControl Dispositivos Edição Page credentials storage

    Published
    MediumCVSS 5.1 EPSS 0.54%

    A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. It...

  22. CVE-2025-3157 Intelbras WRN 150 Wireless Menu cross site scripting

    Published
    MediumCVSS 4.8 EPSS 0.33%

    A vulnerability was found in Intelbras WRN 150 1.0.15_pt_ITB01. It has been rated as problematic. This issue affects some unknown processing of the component Wireless Menu. The manipulation of the argument SSID leads to cross site scripting. The attack may be initiated remotely....

  23. CVE-2025-0784 Intelbras InControl Registered User usuario cleartext transmission

    Published
    MediumCVSS 6.3 EPSS 0.49%

    A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usuario/ of the component Registered User Handler. The manipulation leads to cleartext transmission of sensitive information....

  24. CVE-2024-12897 Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal

    Published
    MediumCVSS 5.3 EPSS 0.49%

    A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.