CVE-2026-2564CWE-640

Intelbras VIP 3260 Z IA OutsideCmd password recovery

Critical · published February 16, 2026

CVSS v4.0
9.2
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
EPSS
0.00845 · 57.6th percentile
Weakness
CWE-640 · Weak Password Recovery Mechanism for Forgotten Password
Published
2026-02-16T16:02Z
EPSS history
Timeline
  • 16 FEB 16:02Z
    Intelbras VIP 3260 Z IA OutsideCmd password recovery
    cvelistv5