CVE-2026-124577: Intelbras SG 2404 PoE L2+ Web Management EXCU_SHELL improper authentication

Published Nov 9, 2026

Updated

A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCUSHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.00.74 is sufficient to fix this issue. Upgrading the affected component is advised.

Affected Software

1 affected component

Intelbras SG 2404 PoE L2+=1.00.70, =1.00.72

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Intelbras SG 2404 PoE L2+ Web Management Interface to a version that resolves this vulnerability.
Fixed in 1.00.74

Event History

Nov 9, 2026

CVE Published

via MITRE·07:15 AM

Data Sourced

via MITRE·07:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which versions require remediation?

Intelbras SG 2404 PoE L2+ versions 1.00.70 and 1.00.72 are affected. Upgrading to version 1.00.74 fixes the issue.

Can this be exploited without credentials or user interaction?

Yes. The vulnerability is remotely exploitable and is rated with no privileges required and no user interaction required.

Is public exploit code available?

Yes. The exploit has been made publicly available and could be used in attacks.