CVE-2026-2564: Intelbras VIP 3260 Z IA OutsideCmd password recovery

Published Feb 16, 2026

Updated

A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component.

Affected Software

1 affected component

Intelbras VIP 3260 Z IA

Event History

Feb 16, 2026

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:18 PM

DescriptionSeverityWeakness

Feb 9, 58115

Event

via FIRST·05:36 PM

Frequently Asked Questions

What is the severity of CVE-2026-2564?

The severity of CVE-2026-2564 is considered critical due to weak password recovery mechanisms.

How do I fix CVE-2026-2564?

To fix CVE-2026-2564, update the Intelbras VIP 3260 Z IA to the latest firmware version provided by Intelbras.

What impact does CVE-2026-2564 have on users?

CVE-2026-2564 may allow unauthorized users to exploit the weak password recovery feature to gain access to the device.

Is CVE-2026-2564 being actively exploited?

As of now, there are no specific reports indicating active exploitation of CVE-2026-2564 in the wild.

Who is affected by CVE-2026-2564?

CVE-2026-2564 affects users of the Intelbras VIP 3260 Z IA running firmware version 2.840.00IB005.0.T.