CVE-2026-2564criticalCWE-640

CVE-2026-2564: critical vulnerability in Intelbras VIP 3260 Z IA

Intelbras VIP 3260 Z IA OutsideCmd password recovery

Published · Updated

Follow this CVE+ Monitor VIP 3260 Z IA

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.2epss 0.5%
A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
Affected products
Intelbras · VIP 3260 Z IA