CVE-2025-26065

CVE-2025-26065 is a cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11. The issue allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the name of a visiting Wi‑Fi network. Affected software is Intelbras RX1500 (2.2.9)...

CVE-2025-26063

The provided documents confirm CVE-2025-26063 affects Intelbras RX1500 v2.2.9 and RX3000 v1.0.11, where unauthenticated attackers can execute arbitrary code by injecting a crafted payload into the ESSID name during network creation. The issue is rooted in ESSID handling in the device’s web/networ...

CVE-2025-26064

CVE-2025-26064 is an XSS vulnerability affecting Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11). The root cause is unvalidated/crafted input in the name of a connected device, allowing attackers to execute arbitrary web scripts or HTML in the web management interface. Impact is web-based, with po...

CVE-2025-26062

CVE-2025-26062 describes an access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 that allows unauthenticated access to the router’s settings file and potential exposure of sensitive information. Affected products are Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11). The root cause is ...