Low severity · published Jun 15, 2026
CVE-2026-12211
Intelbras iNVU 7016 FT Web syslog path traversal
2.7
CVSS
0.4%
EPSS
No
On KEV
Description
A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the component Web Interface. Executing a manipulation can lead to path traversal. The attack can be launched remotely. The exploit has been published and may be used. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I7
iNVU 7016 FT · Intelbras
3.004.00IB000.0.T Build 2025-09-26 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-12211
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-12211
api-cronos.intelbras.com.br
http://api-cronos.intelbras.com.br/download/INVU/INVU7016FT/prod/INVU7016FT-2026.05.29-712953bf2bb2af7e72d0577ad5ef6455.260527.BIN
coaglio.com
https://coaglio.com/writeups/lfi-intelbras-invu.html
vuldb.com
https://vuldb.com/cve/CVE-2026-12211
vuldb.com
https://vuldb.com/submit/832544
vuldb.com
https://vuldb.com/vuln/370853
vuldb.com
https://vuldb.com/vuln/370853/cti
