What is the CVSS score of CVE-2026-2564?

CVE-2026-2564 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Intelbras VIP are affected by CVE-2026-2564?

A high-severity vulnerability (CVE-2026-2564, CVSS 8.1) affects Intelbras VIP 3260 Z IA devices with no patch currently available.

How to fix or mitigate CVE-2026-2564?

Within 24 hours: Inventory all Intelbras VIP 3260 Z IA devices running firmware 2.840.00IB005.0.T and assess network exposure. Within 7 days: Implement network segmentation to restrict access to affected devices and disable remote management if operationally feasible. Within 30 days: Monitor vendor communications for patch availability and develop upgrade plan; evaluate alternative solutions if patches remain unavailable.

Intelbras VIP CVE-2026-2564

HIGH

Weak Password Recovery Mechanism for Forgotten Password (CWE-640)

2026-02-16 cna@vuldb.com

Information Disclosure

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 16, 2026 - 17:18 nvd

HIGH 8.1

DescriptionCVE.org

A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component.

AnalysisAI

Intelbras VIP 3260 Z IA devices running firmware 2.840.00IB005.0.T contain a weak password recovery mechanism in the /OutsideCmd functionality that allows remote attackers with high technical sophistication to potentially compromise authentication controls. The vulnerability carries a CVSS score of 8.1 and currently lacks a patch, requiring organizations to implement compensating controls or consider alternative solutions until remediation is available.

Technical ContextAI

This vulnerability (CWE-640: Weak Password Recovery Mechanism for Forgotten Password) A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation appears to be difficult. It is recommended to upgrade the affected component.