Dashboard / CVE-2026-124577

CVE-2026-124577

HIGH
MEDIUM Priority: 0.18 BB Relevance: 78/100
Published: 2026-11-09 Modified: 2026-11-12 First seen: 2026-11-09 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.00.74 is sufficient to fix this issue. Upgrading the affected component is advised.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
Intelbras SG 2404 PoE L2+ 1.00.70
Intelbras SG 2404 PoE L2+ 1.00.72
Intelbras SG 2404 PoE L2+ 1.00.70
Intelbras SG 2404 PoE L2+ 1.00.72
Intelbras SG 2404 PoE L2+ 1.00.70
Intelbras SG 2404 PoE L2+ 1.00.72

References & Advisories (4)

https://vuldb.com/submit/1038184
third-party-advisory
https://vuldb.com/vuln/432923/cti
signature permissions-required

Bug Bounty Relevance

78 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.9 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

2.07%
Raw Score 0.020670
Percentile 81.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.02067
2026-11-12
0.02067
2026-11-10
0.02067
2026-11-09
0.02067

Intelligence Sources

mitre ref →
nvd ref →

External Links