CVE-2026-101265CWE-200CWE-540information-disclosure

CVE-2026-101265

Low · published September 29, 2026

CVSS v3.1
3.1
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation leads to inclusion of sensitive information in source code. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
2.3 · CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00208 · 10.3th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-540 · Inclusion of Sensitive Information in Source Code
Published
2026-09-29T04:17Z
References (5)
EPSS history
Timeline
  • 30 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 28 SEP 23:30Z
    Intelbras TIP 125i Básico sensitive information in source
    cvelistv5