{"id":"CVE-2026-101265","state":"PUBLISHED","title":"Intelbras TIP 125i Básico sensitive information in source","description":"A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation leads to inclusion of sensitive information in source code. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.","publishedAt":"2026-09-28T23:30:10.163Z","updatedAt":"2026-09-29T12:08:26.960Z","severity":{"score":2.3,"label":"Low","version":"4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Intelbras TIP 125i"],"affected":[{"vendor":"Intelbras","product":"TIP 125i","versions":[{"version":"4.3.35","status":"affected"},{"version":"4.3.41","status":"affected"}],"cpes":["cpe:2.3:h:intelbras:tip_125i:*:*:*:*:*:*:*:*"],"modules":["Básico Page"]}],"references":["https://vuldb.com/vuln/411033","https://vuldb.com/vuln/411033/cti","https://vuldb.com/cve/CVE-2026-101265","https://vuldb.com/submit/916125"],"weaknesses":["CWE-540","CWE-200"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/101xxx/CVE-2026-101265.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-101265","state":"PUBLISHED","datePublished":"2026-09-28T23:30:10.163Z","dateUpdated":"2026-09-29T12:08:26.960Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-09-28T11:41:07.968Z"},"containers":{"cna":{"title":"Intelbras TIP 125i Básico sensitive information in source","descriptions":[{"lang":"en","value":"A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation leads to inclusion of sensitive information in source code. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure."}],"affected":[{"vendor":"Intelbras","product":"TIP 125i","versions":[{"version":"4.3.35","status":"affected"},{"version":"4.3.41","status":"affected"}],"cpes":["cpe:2.3:h:intelbras:tip_125i:*:*:*:*:*:*:*:*"],"modules":["Básico Page"]}],"references":[{"url":"https://vuldb.com/vuln/411033","name":"VDB-411033 | Intelbras TIP 125i Básico sensitive information in source","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/411033/cti","name":"VDB-411033 | CTI Indicators (IOB, IOC, TTP)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-101265","name":"CVE-2026-101265 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/916125","name":"Submit #916125 | Intelbras Intelbras TIP125_I 4.3.35/4.3.41 Sensitive Data Exposure","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":2.3,"vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"LOW"}},{"cvssV3_1":{"version":"3.1","baseScore":3.1,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":3.1,"vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":2.1,"vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-540","type":"CWE","lang":"en","description":"Inclusion of Sensitive Information in Source Code"}]},{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"Information Disclosure"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-09-28T23:30:10.163Z"},"timeline":[{"time":"2026-09-28T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-09-28T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-09-28T13:46:12.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"TheL4zyF0x (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"x_generator":["VulDB PVTS v202609"]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://vuldb.com/submit/916125","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-29T12:07:58.106106Z","id":"CVE-2026-101265","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-29T12:08:26.960Z"}}]}}}