CVE-2026-12211 | BDVDB-2026-340253 Detail
IntelbrasiNVU 7016 FT
Description#
A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the component Web Interface. Executing a manipulation can lead to path traversal. The attack can be launched remotely. The exploit has been published and may be used. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
References#
- https://vuldb.com/vuln/370853
- https://vuldb.com/vuln/370853/cti
- https://vuldb.com/cve/CVE-2026-12211
- https://vuldb.com/submit/832544
- https://coaglio.com/writeups/lfi-intelbras-invu.html
- http://api-cronos.intelbras.com.br/download/INVU/INVU7016FT/prod/INVU7016FT-2026.05.29-712953bf2bb2af7e72d0577ad5ef6455.260527.BIN
Exploit#
History#
- Version 1Record published in the CVE List.