CVE-2025-26064

HIGH EPSS 55.4%
Published Jul 31, 202511mo ago · Modified Jun 17, 20261w ago
7.3 CVSS 3.1
High
Find Similar
Published Jul 31, 2025 11mo ago
Last Modified Jun 17, 2026 1w ago

Description

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a connnected device.

CVSS Details

Base Score
7.3
Exploitability
3.9
Impact
3.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability Low

Threat Intelligence

EPSS Exploit Probability
55.4% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 4

VendorProductVersionRange
intelbrasrx_1500_firmware2.2.9any
intelbrasrx_1500*any
intelbrasrx_3000_firmware1.0.11any
intelbrasrx_3000*any

References 5

  • seclists.org http://seclists.org/fulldisclosure/2025/Jul/14
  • seclists.org http://seclists.org/fulldisclosure/2025/Jul/26
  • manuais.intelbras.com.br https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html
    Release Notes
  • manuais.intelbras.com.br https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html
    Release Notes
  • seclists.org https://seclists.org/fulldisclosure/2025/Jul/14
    ExploitMailing ListThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.