CVE-2025-26065

CVSS 7.3 HIGHEPSS 0.3%CWE-79

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://seclists.org/fulldisclosure/2025/Jul/26 https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html https://seclists.org/fulldisclosure/2025/Jul/26