Vulnerability · Published Jun 15, 2026 · Assigned by VulDB
CVE-2026-12211Intelbras iNVU 7016 FT Web syslog path traversal
Low 2.7
In plain English
A low-severity path traversal in iNVU 7016 FT from Intelbras. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Official description
A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the component Web Interface. Executing a manipulation can lead to path traversal. The attack can be launched remotely. The exploit has been published and may be used. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Intelbras | iNVU 7016 FT | 3.004.00IB000.0.T Build 2025-09-26 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
References
- VDB-370853 | Intelbras iNVU 7016 FT Web syslog path traversal vdb-entry
- VDB-370853 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-12211 | CVE Analysis and Report third-party-advisory
- Submit #832544 | Intelbras iNVU 7016 FT 3.004.00IB000.0.T (Build 2025-09-26) Path Traversal third-party-advisory
- https://coaglio.com/writeups/lfi-intelbras-invu.html exploit
- http://api-cronos.intelbras.com.br/download/INVU/INVU7016FT/prod/INVU7016FT-2026.05.29-712953bf2bb2af7e72d0577ad5ef6455.260527.BIN patch