CVE-2026-12211
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A path traversal vulnerability has been found in the web interface of Intelbras iNVU 7016 FT version 3.004.00IB000.0.T Build 2025-09-26, in the file /RPC2_Loadfile/syslog/. The attack can be launched remotely and an exploit has been published.
Risk Assessment
An attacker can remotely read arbitrary files on the system, leading to disclosure of sensitive data.
Recommendation
Immediately update the software to a version that fixes the vulnerability.
Original NVD description (English source)
A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the component Web Interface. Executing a manipulation can lead to path traversal. The attack can be launched remotely. The exploit has been published and may be used. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.