CVE-2025-26062

Published: Jul 31, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings.

Affected (2)

Products: Intelbras: Rx 1500 Firmware, Rx 3000 Firmware

Intelbras

2 products

Rx 1500 Firmware

Rx 3000 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intelbras Rx 1500 Firmware	Version 2.2.9

Running on/with	Platform Versions
Intelbras Rx 1500	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intelbras Rx 3000 Firmware	Version 1.0.11

Running on/with	Platform Versions
Intelbras Rx 3000	All versions

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (5)

https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html

Source: cve@mitre.org

Release Notes

https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html

Source: cve@mitre.org

Release Notes

https://seclists.org/fulldisclosure/2025/Jul/14

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2025/Jul/14

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2025/Jul/26

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.