CVE-2026-12211 PUBLISHED

Intelbras iNVU 7016 FT Web syslog path traversal

Assigner: VulDB
Reserved: 14.06.2026 Published: 15.06.2026 Updated: 15.06.2026

A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the component Web Interface. Executing a manipulation can lead to path traversal. The attack can be launched remotely. The exploit has been published and may be used. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.1

Product Status

Vendor Intelbras
Product iNVU 7016 FT
Versions
  • Version 3.004.00IB000.0.T Build 2025-09-26 is affected

Credits

  • coaglio (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Path Traversal CWE