Vulnerabilities

TI-2026-65163 CVE-2026-101265 · GHSA-c7j5-fj65-gwq4

Intelbras TIP 125i Básico sensitive information in source

MEDIUM 45

A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00261 Published 2026-09-28 No fix listed CWE-200

TI-2026-10503 CVE-2026-12211 · GHSA-64mj-fhhf-6gmf

Intelbras iNVU 7016 FT Web syslog path traversal

MEDIUM 56

A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00372 Published 2026-06-15 No fix listed CWE-22

TI-2019-15525 CVE-2019-25472 · GHSA-wq39-mxp3-xrv6

IntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile

HIGH 77

IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00343 Published 2026-03-11 No fix listed CWE-73

TI-2026-02678 CVE-2026-3101 · GHSA-6pf6-w4c2-rx3f

Intelbras TIP 635G Ping os command injection

MEDIUM 57

A vulnerability was found in Intelbras TIP 635G 1.12.3.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.06627 Published 2026-02-24 No fix listed CWE-77

TI-2026-02190 CVE-2026-2564 · GHSA-xq5p-rr5f-vjc5

Intelbras VIP 3260 Z IA OutsideCmd password recovery

MEDIUM 42

A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00538 Published 2026-02-16 No fix listed CWE-640

TI-2020-19098 CVE-2020-36963 · GHSA-mgpr-67wh-564q

Intelbras Router RF 301K 1.1.2 - Authentication Bypass

HIGH 77

Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00409 Published 2026-01-28 No fix listed CWE-306

TI-2025-12086 CVE-2025-13221 · GHSA-f985-hh3h-wcqc

Intelbras UnniTI usuarios.xml credentials storage

MEDIUM 64

A weakness has been identified in Intelbras UnniTI 24.07.11.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0039 Published 2025-11-15 No fix listed CWE-255

TI-2025-12057 CVE-2025-13187 · GHSA-2hjg-83v5-q3mf

Intelbras ICIP acessodeusuario.xml credentials storage

HIGH 70

A security vulnerability has been detected in Intelbras ICIP 2.0.20.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00573 Published 2025-11-14 No fix listed CWE-255

TI-2025-35209 CVE-2025-55976 · GHSA-m494-73pw-6cw9

Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless…

HIGH 72

Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.03493 Published 2025-09-10 No fix listed CWE-200

TI-2025-07795 CVE-2025-8515 · GHSA-c9qv-g34c-5xgf

Intelbras InControl JSON Endpoint operador information disclosure

MEDIUM 45

A weakness has been identified in Intelbras InControl 2.21.60.9.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00319 Published 2025-08-04 No fix listed CWE-200

TI-2025-19240 CVE-2025-26065 · GHSA-qq2x-2g28-66j5

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11…

HIGH 71

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00425 Published 2025-08-04 No fix listed CWE-79

TI-2025-19239 CVE-2025-26064 · GHSA-rq5x-mmcc-mgvx

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11…

HIGH 71

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01044 Published 2025-07-31 No fix listed CWE-79

TI-2025-19238 CVE-2025-26063 · GHSA-8xpj-x7cg-qg43

An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers…

HIGH 82

An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSID name when creating a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01335 Published 2025-07-31 No fix listed CWE-77

TI-2025-19237 CVE-2025-26062 · GHSA-x7rh-jcrp-8fwf

An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows…

HIGH 82

An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01116 Published 2025-07-31 No fix listed CWE-284

TI-2025-06423 CVE-2025-7061 · GHSA-c7hp-77g4-72w9

Intelbras InControl operador csv injection

MEDIUM 56

A vulnerability was found in Intelbras InControl up to 2.21.60.9.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00344 Published 2025-07-04 No fix listed CWE-1236

TI-2025-32125 CVE-2025-50405 · GHSA-88gh-j3x9-rmv8

Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in…

LOW 29

Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload function and GetFirmwareValidation function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00352 Published 2025-07-01 No fix listed CWE-284

TI-2025-32124 CVE-2025-50404 · GHSA-6659-vrc2-p5xg

Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow.

LOW 36

Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.09925 Published 2025-07-01 No fix listed CWE-190

TI-2025-06144 CVE-2025-6765 · GHSA-8v77-f7vf-cxmh

Intelbras InControl HTTP PUT Request operador permission

MEDIUM 57

A vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00441 Published 2025-06-27 No fix listed CWE-266

TI-2025-04478 CVE-2025-4996 · GHSA-qv2q-53c8-mm8v

Intelbras RF 301K Add Static IP cross site scripting

MEDIUM 55

A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0032 Published 2025-05-20 No fix listed CWE-79

TI-2025-03815 CVE-2025-4286 · GHSA-5vrx-97jq-34j7

Intelbras InControl Dispositivos Edição Page credentials storage

MEDIUM 56

A vulnerability was found in Intelbras InControl up to 2.21.59.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00538 Published 2025-05-05 No fix listed CWE-255

TI-2025-02757 CVE-2025-3157 · GHSA-wgcm-fvrc-r6xc

Intelbras WRN 150 Wireless Menu cross site scripting

LOW 22

A vulnerability was found in Intelbras WRN 150 1.0.15_pt_ITB01.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00332 Published 2025-04-03 No fix listed CWE-79

TI-2025-00657 CVE-2025-0784 · GHSA-345g-rh3c-p73g

Intelbras InControl Registered User usuario cleartext transmission

MEDIUM 61

A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00488 Published 2025-01-28 No fix listed CWE-310

TI-2024-11950 CVE-2024-12897 · GHSA-cpq8-gjrv-h7mr

Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal

MEDIUM 57

A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00485 Published 2024-12-22 No fix listed CWE-23

TI-2024-11949 CVE-2024-12896 · GHSA-325m-pvh6-hvj7

Intelbras VIP S4320 G2 Web Interface webCapsConfig information disclosure

HIGH 70

A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00485 Published 2024-12-22 No fix listed CWE-200

TI-2024-08657 CVE-2024-9325 · GHSA-794x-9rqm-24vx

Intelbras InControl incontrol-service-watchdog.exe unquoted search path

LOW 39

A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00331 Published 2024-09-29 No fix listed CWE-426

Vulnerabilities

Filters