CVE-2025-6765: Intelbras InControl HTTP PUT Request operador permission

Published Jun 27, 2025
·
Updated

A vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60.9. This issue affects some unknown processing of the file /v1/operador/ of the component HTTP PUT Request Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components
Intelbras InControl
Intelbras Incontrol Web=2.21.60.9

Event History

Jun 27, 2025
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 13, 58473
Event
via NVD·08:59 PM

Frequently Asked Questions

1

What is the severity of CVE-2025-6765?

CVE-2025-6765 is classified as a critical vulnerability.

2

How does CVE-2025-6765 affect Intelbras InControl?

CVE-2025-6765 affects the HTTP PUT Request Handler component by leading to permission issues.

3

What can be done to mitigate CVE-2025-6765?

To mitigate CVE-2025-6765, it is recommended to update Intelbras InControl to the latest version.

4

Can CVE-2025-6765 be exploited remotely?

Yes, CVE-2025-6765 can be exploited remotely, allowing unauthorized access through permission issues.

5

Which version of Intelbras InControl is affected by CVE-2025-6765?

CVE-2025-6765 affects Intelbras InControl version 2.21.60.9.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203