Paper/Archive/CVE-2026-2564

CVE-2026-2564

Intelbras VIP 3260 Z IA — Intelbras VIP 3260 Z IA OutsideCmd password recovery

CVSS 9.2 (CNA)9.2 / 10 × 3027.6 Not in CISA KEV+300.0 EPSS percentile 45.4.454 × 209.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component.

Affected

ProductAffectedFixed inSource

VIP 3260 Z IA2.840.00IB005.0.T–CNA

Scores by source

VulDB (CNA)9.2CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X

VulDB (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C

VulDB (CNA)8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refvuldb.com/?id.346171 refvuldb.com/?ctiid.346171 writeupvuldb.com/?submit.741776