Vulnerability · Published Feb 16, 2026 · Assigned by VulDB

CVE-2026-2564Intelbras VIP 3260 Z IA OutsideCmd password recovery

High 8.1

In plain English

A high-severity security flaw in VIP 3260 Z IA from Intelbras. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.5%top 54.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component.

Affected products (as reported)

Vendor	Product	Versions
Intelbras	VIP 3260 Z IA	2.840.00IB005.0.T

Weakness: CWE-640 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C

References

VDB-346171 | Intelbras VIP 3260 Z IA OutsideCmd password recovery vdb-entry
VDB-346171 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #741776 | Intelbras VIP 3260 Z IA v2.840.00IB005.0.T Weak Password Recovery third-party-advisory