CVE-2026-2564
Last modified
CVE-2026-2564 is a critical-severity vulnerability rated 9.2/10 on the CVSS scale. A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-2564?
How severe is CVE-2026-2564?
How do I fix CVE-2026-2564?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-25634iccDEV provides a set of libraries and tools that allow for …7.8
- CVE-2026-25635calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM …8.6
- CVE-2026-25636calibre is an e-book manager. In 9.1.0 and earlier, a path t…7.8
- CVE-2026-25637ImageMagick is free and open-source software used for editin…5.3
- CVE-2026-25638ImageMagick is free and open-source software used for editin…5.3
- CVE-2026-25639Axios is a promise based HTTP client for the browser and Nod…7.5
- CVE-2026-25640Pydantic AI is a Python agent framework for building applica…5.4
- CVE-2026-25641SandboxJS is a JavaScript sandboxing library. Prior to 0.8.2…9
- CVE-2026-25642HedgeDoc is an open source, real-time, collaborative, markdo…6.1
- CVE-2026-25643Frigate is a network video recorder (NVR) with realtime loca…9.1
- CVE-2026-25644DataHub is an open-source metadata platform. Prior to versio…7.5
- CVE-2026-25645Requests is a HTTP library. Prior to version 2.33.0, the `re…5.5
Are you affected by CVE-2026-2564?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST