Intelbras
- Total products in the ecosystem
- 23
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/06/2026, Intelbras recorded 1 security vulnerabilities in the last 90 days across 1 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, TIP 125i had the most security vulnerabilities in the Intelbras ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-101265Intelbras TIP 125i Básico sensitive information in source | Exploitation statusPublic exploit | FixNot confirmed | Affected productTIP 125i | Published09/28/2026 | SeverityLow |
CVE-2026-12211Intelbras iNVU 7016 FT Web syslog path traversal | Exploitation statusPublic exploit | FixYes | Affected productiNVU 7016 FT | Published06/15/2026 | SeverityMedium |
CVE-2019-25472IntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile | Exploitation statusPublic exploit | FixNot confirmed | Affected productTelefone IP TIP 200 | Published03/11/2026 | SeverityHigh |
CVE-2026-3101Intelbras TIP 635G Ping os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productTIP 635G | Published02/24/2026 | SeverityMedium |
CVE-2026-2564Intelbras VIP 3260 Z IA OutsideCmd password recovery | Exploitation statusNot known exploited | FixNot confirmed | Affected productVIP 3260 Z IA | Published02/16/2026 | SeverityCritical |
CVE-2020-36963Intelbras Router RF 301K 1.1.2 - Authentication Bypass | Exploitation statusPublic exploit | FixNot confirmed | Affected productIntelbras Router RF 301K | Published01/28/2026 | SeverityHigh |
CVE-2025-13221Intelbras UnniTI usuarios.xml credentials storage | Exploitation statusPublic exploit | FixNot confirmed | Affected productUnniTI | Published11/15/2025 | SeverityMedium |
CVE-2025-13187Intelbras ICIP acessodeusuario.xml credentials storage | Exploitation statusPublic exploit | FixNot confirmed | Affected productICIP | Published11/14/2025 | SeverityMedium |
CVE-2025-8515Intelbras InControl JSON Endpoint operador information disclosure | Exploitation statusPublic exploit | FixNot confirmed | Affected productInControl | Published08/04/2025 | SeverityLow |
CVE-2025-7061Intelbras InControl operador csv injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productInControl | Published07/04/2025 | SeverityMedium |
CVE-2025-6765Intelbras InControl HTTP PUT Request operador permission | Exploitation statusPublic exploit | FixNot confirmed | Affected productInControl | Published06/27/2025 | SeverityMedium |
CVE-2025-4996Intelbras RF 301K Add Static IP cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productRF 301K | Published05/20/2025 | SeverityMedium |
CVE-2025-4286Intelbras InControl Dispositivos Edição Page credentials storage | Exploitation statusPublic exploit | FixYes | Affected productInControl | Published05/05/2025 | SeverityMedium |
CVE-2025-3157Intelbras WRN 150 Wireless Menu cross site scripting | Exploitation statusNot known exploited | FixNot confirmed | Affected productWRN 150 | Published04/03/2025 | SeverityMedium |
CVE-2025-0784Intelbras InControl Registered User usuario cleartext transmission | Exploitation statusPublic exploit | FixNot confirmed | Affected productInControl | Published01/28/2025 | SeverityMedium |
CVE-2024-12897Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal | Exploitation statusPublic exploit | FixNot confirmed | Affected productVIP S3020 G2 | Published12/22/2024 | SeverityMedium |
CVE-2024-12896Intelbras VIP S4320 G2 Web Interface webCapsConfig information disclosure | Exploitation statusPublic exploit | FixNot confirmed | Affected productVIP S3020 G2 | Published12/22/2024 | SeverityMedium |
CVE-2024-9325Intelbras InControl incontrol-service-watchdog.exe unquoted search path | Exploitation statusNot known exploited | FixYes | Affected productInControl | Published09/29/2024 | SeverityHigh |
CVE-2024-9324Intelbras InControl Relatório de Operadores Page operador code injection | Exploitation statusNot known exploited | FixYes | Affected productInControl | Published09/29/2024 | SeverityMedium |
CVE-2024-6080Intelbras InControl incontrolWebcam Service unquoted search path | Exploitation statusPublic exploit | FixYes | Affected productInControl | Published06/17/2024 | SeverityHigh |
CVE-2024-3160Intelbras HDCVI 1016 HTTP GET Request cap.js information disclosure | Exploitation statusPublic exploit | FixNot confirmed | Affected productMHDX 1004 | Published04/02/2024 | SeverityMedium |
CVE-2023-6103Intelbras RX 1500 SSID WiFi.html cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productRX 1500 | Published11/13/2023 | SeverityLow |
CVE-2023-36144 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published06/30/2023 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
