CVE-2025-26065: XSS

Published Aug 4, 2025

Updated

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network.

Affected Software

6 affected components

Intelbras RX1500

Intelbras RX3000

All of the following

Intelbras Rx 1500 Firmware=2.2.9

Intelbras RX 1500

All of the following

Intelbras Rx 3000 Firmware=1.0.11

Intelbras Rx 3000

Event History

Aug 4, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-26065?

CVE-2025-26065 is classified as a high severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2025-26065?

To mitigate CVE-2025-26065, upgrade Intelbras RX1500 to version 2.2.10 or higher and RX3000 to version 1.0.12 or higher.

What products are affected by CVE-2025-26065?

CVE-2025-26065 affects Intelbras RX1500 version v2.2.9 and RX3000 version v1.0.11.

What can attackers do with CVE-2025-26065?

Attackers can exploit CVE-2025-26065 to execute arbitrary web scripts or HTML by injecting malicious payloads into Wi-Fi network names.

Is CVE-2025-26065 a remote vulnerability?

Yes, CVE-2025-26065 is a remote vulnerability that can be exploited without physical access to the vulnerable device.