Cross-site Scripting Vulnerability in Intelbras RX1500 and RX3000
CVE-2025-26064

7.3HIGH

Key Information:

Vendor: Intelbras
Status: RX1500 & RX3000
Vendor: CVE Published:; 31 July 2025

What is CVE-2025-26064?

A cross-site scripting (XSS) vulnerability exists in the Intelbras RX1500 v2.2.9 and RX3000 v1.0.11, allowing attackers to inject malicious JavaScript or HTML code through a crafted payload embedded in the name of connected devices. This exploitation can lead to unauthorized access to user accounts and the potential manipulation of sensitive information within affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://manuais.intelbras.com.br/manual-linha-rx/ChangeLo...

https://seclists.org/fulldisclosure/2025/Jul/14

CVSS V3.1

Score:

7.3

Severity:

HIGH

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 31, 2025
Vulnerability Reserved
Feb 7, 2025

JSON

Intelbras

What is CVE-2025-26064?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.