Improper Authentication Vulnerability in Intelbras SG 2404 PoE L2+ Web Management Interface
CVE-2026-124577

9.3CRITICAL

Key Information:

Vendor

Intelbras

Status
Sg 2404 Poe L2+
Vendor
CVE Published:
9 November 2026

What is CVE-2026-124577?

A vulnerability has been discovered in the Intelbras SG 2404 PoE L2+ Web Management Interface, specifically within an unknown function of the /EXCU_SHELL file. This weakness allows for remote attackers to perform manipulations that can result in improper authentication. This exploit, which is publicly accessible, poses a significant risk as it may lead to unauthorized execution of privileged commands. To rectify this security gap, it is strongly recommended that users upgrade to version 1.00.74.

Affected Version(s)

SG 2404 PoE L2+ 1.00.70

SG 2404 PoE L2+ 1.00.72

SG 2404 PoE L2+ 1.00.74

References

https://vuldb.com/vuln/432923
vdb-entry
https://vuldb.com/vuln/432923/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-124577
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

JoasHS (VulDB User)
VulDB Vulnerability Moderation Team
.