Paper/Archive/CVE-2025-26062

CVE-2025-26062

mitre — An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings fi…

EPSS 1%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 64.8.648 × 2013.0 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refmanuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html refmanuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html refseclists.org/fulldisclosure/2025/Jul/14 refseclists.org/fulldisclosure/2025/Jul/26 refseclists.org/fulldisclosure/2025/Jul/14