CVE-2025-26063: Command Injection

Published Jul 31, 2025

Updated

An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSID name when creating a network.

Affected Software

6 affected components

Intelbras RX1500

Intelbras RX3000

All of the following

Intelbras Rx 1500 Firmware=2.2.9

Intelbras RX 1500

All of the following

Intelbras Rx 3000 Firmware=1.0.11

Intelbras Rx 3000

Event History

Jul 31, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-26063?

CVE-2025-26063 is considered a high-severity vulnerability due to its potential for arbitrary code execution by unauthenticated attackers.

How do I fix CVE-2025-26063?

To fix CVE-2025-26063, update the affected Intelbras RX1500 and RX3000 devices to the latest firmware version provided by the vendor.

What devices are affected by CVE-2025-26063?

CVE-2025-26063 affects Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 models.

What type of attack is possible with CVE-2025-26063?

CVE-2025-26063 allows unauthenticated attackers to execute arbitrary code by injecting a crafted payload into the ESSID name.

Can CVE-2025-26063 be exploited remotely?

Yes, CVE-2025-26063 can be exploited remotely without authentication, making it particularly dangerous for network security.