CVE-2025-26065

HIGH EPSS 26.2%
Published Aug 4, 202510mo ago · Modified Jun 17, 20261w ago
7.3 CVSS 3.1
High
Find Similar
Published Aug 4, 2025 10mo ago
Last Modified Jun 17, 2026 1w ago

Description

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network.

CVSS Details

Base Score
7.3
Exploitability
3.9
Impact
3.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability Low

Threat Intelligence

EPSS Exploit Probability
26.2% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 4

VendorProductVersionRange
intelbrasrx_1500_firmware2.2.9any
intelbrasrx_1500*any
intelbrasrx_3000_firmware1.0.11any
intelbrasrx_3000*any

References 4

  • seclists.org http://seclists.org/fulldisclosure/2025/Jul/26
  • manuais.intelbras.com.br https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html
    Release Notes
  • manuais.intelbras.com.br https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html
    Release Notes
  • seclists.org https://seclists.org/fulldisclosure/2025/Jul/26
    ExploitMailing ListThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.