https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3101.htmlhttps://patchthecve.com/cve/CVE-2026-3101.htmlWed, 17 Jun 2026 10:43:02 +0000MEDIUM 6.3: A vulnerability was found in Intelbras TIP 635G 1.12.3.5. This vulnerability affects unknown code of the component Ping Handler. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early ahttps://patchthecve.com/cve/CVE-2025-13187.htmlhttps://patchthecve.com/cve/CVE-2025-13187.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 5.3: A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of credentials. The attack may be launched remotely. The exploit hahttps://patchthecve.com/cve/CVE-2025-55976.htmlhttps://patchthecve.com/cve/CVE-2025-55976.htmlWed, 17 Jun 2026 09:42:16 +0000HIGH 8.4: Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly obtain the Wi-Fi network password by querying this endpoint.https://patchthecve.com/cve/CVE-2025-26065.htmlhttps://patchthecve.com/cve/CVE-2025-26065.htmlWed, 17 Jun 2026 09:01:27 +0000HIGH 7.3: A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network.https://patchthecve.com/cve/CVE-2025-8515.htmlhttps://patchthecve.com/cve/CVE-2025-8515.htmlWed, 17 Jun 2026 10:07:07 +0000LOW 3.1: A weakness has been identified in Intelbras InControl 2.21.60.9. This vulnerability affects unknown code of the file /v1/operador/ of the component JSON Endpoint. Executing manipulation can lead to information disclosure. It is possible to launch the attack remotely. A high complexity level is assochttps://patchthecve.com/cve/CVE-2025-26064.htmlhttps://patchthecve.com/cve/CVE-2025-26064.htmlWed, 17 Jun 2026 09:01:27 +0000HIGH 7.3: A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a connnected device.https://patchthecve.com/cve/CVE-2025-26063.htmlhttps://patchthecve.com/cve/CVE-2025-26063.htmlWed, 17 Jun 2026 09:01:27 +0000CRITICAL 9.8: An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSID name when creating a network.https://patchthecve.com/cve/CVE-2025-26062.htmlhttps://patchthecve.com/cve/CVE-2025-26062.htmlWed, 17 Jun 2026 09:01:26 +0000CRITICAL 9.8: An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings.https://patchthecve.com/cve/CVE-2025-50405.htmlhttps://patchthecve.com/cve/CVE-2025-50405.htmlWed, 17 Jun 2026 09:35:03 +0000MEDIUM 6.5: Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload function and GetFirmwareValidation function.https://patchthecve.com/cve/CVE-2025-50404.htmlhttps://patchthecve.com/cve/CVE-2025-50404.htmlWed, 17 Jun 2026 09:35:03 +0000MEDIUM 5.3: Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing the array to cross the boundary and overwrite other fields in the array.https://patchthecve.com/cve/CVE-2025-6765.htmlhttps://patchthecve.com/cve/CVE-2025-6765.htmlWed, 17 Jun 2026 10:02:31 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60.9. This issue affects some unknown processing of the file /v1/operador/ of the component HTTP PUT Request Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The ehttps://patchthecve.com/cve/CVE-2025-0784.htmlhttps://patchthecve.com/cve/CVE-2025-0784.htmlWed, 17 Jun 2026 08:27:07 +0000LOW 3.7: A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usuario/ of the component Registered User Handler. The manipulation leads to cleartext transmission of sensitive information. The attack can be ihttps://patchthecve.com/cve/CVE-2024-9325.htmlhttps://patchthecve.com/cve/CVE-2024-9325.htmlWed, 17 Jun 2026 08:24:21 +0000HIGH 7.8: A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The manipulation leads to unquoted search path. It is possible to lhttps://patchthecve.com/cve/CVE-2024-9324.htmlhttps://patchthecve.com/cve/CVE-2024-9324.htmlWed, 17 Jun 2026 08:24:21 +0000MEDIUM 6.3: A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file /v1/operador/ of the component Relatório de Operadores Page. The manipulation of the argument fields leads to code injection. The attack mayhttps://patchthecve.com/cve/CVE-2024-6080.htmlhttps://patchthecve.com/cve/CVE-2024-6080.htmlWed, 17 Jun 2026 08:17:14 +0000HIGH 7.8: A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack. The exploit has been disclosed to the p