ByteOS Network

NVD Vulnerability Details :

CVE-2025-26065

Analyzed

Source-cve@mitre.org

Published At-04 Aug, 2025 | 15:15

Updated At-21 Aug, 2025 | 00:10

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CPE Matches

intelbras>>rx_1500_firmware>>2.2.9

cpe:2.3:o:intelbras:rx_1500_firmware:2.2.9:*:*:*:*:*:*:*

intelbras>>rx_1500>>-

cpe:2.3:h:intelbras:rx_1500:-:*:*:*:*:*:*:*

intelbras>>rx_3000_firmware>>1.0.11

cpe:2.3:o:intelbras:rx_3000_firmware:1.0.11:*:*:*:*:*:*:*

intelbras>>rx_3000>>-

cpe:2.3:h:intelbras:rx_3000:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html	cve@mitre.org	Release Notes
https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html	cve@mitre.org	Release Notes
https://seclists.org/fulldisclosure/2025/Jul/26	cve@mitre.org	Exploit Mailing List Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History