CVE-2025-26065

The Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers are affected by a cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation, specifically allowing an attacker to inject a crafted payload into the name of a visiting Wi-Fi...

CVE-2025-26064

The Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers are affected by a cross-site scripting (XSS) vulnerability in their web management interfaces. The root cause is a lack of sufficient measures to protect the web page structure, specifically due to unvalidated connected device names . An ...

CVE-2025-26063

The Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers are vulnerable to arbitrary code execution due to a lack of proper neutralization of special elements when processing ESSID identifiers . An unauthenticated remote attacker can exploit this by sending a specially crafted POST request to t...

CVE-2025-26062

An improper access control issue exists in the Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers. This vulnerability allows unauthenticated attackers to access the router's settings file, which may contain potentially sensitive information from the current configuration. To mitigate this ris...