CVE-2025-26062

critical · 9.8

An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings.

9.8

CVSS

1.1%

EPSS (exploit prob.)

64th

EPSS percentile

2025-07-31

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-284

Affected products

Vendor	Product	Affected versions
intelbras	rx_1500_firmware	2.2.9
intelbras	rx_1500	all versions
intelbras	rx_3000_firmware	1.0.11
intelbras	rx_3000	all versions

Check a specific version with /api/v1/cve/match.

References

https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html
https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html
https://seclists.org/fulldisclosure/2025/Jul/14
http://seclists.org/fulldisclosure/2025/Jul/14
http://seclists.org/fulldisclosure/2025/Jul/26

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-26062