CVE-2026-101265: Inclusion of Sensitive Information in Source Code in Intelbras TIP 125i
CVE-2026-101265 is a vulnerability in Intelbras TIP 125i versions 4.3.35 and 4.3.41 where sensitive information is included in the source code due to an issue in an unknown function of the Básico Page component. The vulnerability can be exploited remotely but requires high attack complexity and is difficult to exploit. Exploit code is publicly available, though no known exploits are reported in the wild. The CVSS 4.0 score is low (2.3).
AI Analysis
Technical Summary
This vulnerability involves the inclusion of sensitive information in the source code of Intelbras TIP 125i versions 4.3.35 and 4.3.41. The affected component is an unknown function within the Básico Page. The vulnerability can be triggered remotely but has a high complexity and low exploitability. Public exploit code exists, but there are no reports of active exploitation. The vendor was notified early about this issue. The CVSS 4.0 vector indicates network attack vector, high complexity, low confidentiality impact, and no privileges or user interaction required.
Potential Impact
Sensitive information exposure in source code could potentially aid attackers in further attacks or reconnaissance. However, the low CVSS score and high attack complexity suggest limited immediate impact. No known active exploitation has been reported.
Mitigation Recommendations
No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the high complexity and low exploitability, immediate urgent action may not be required, but monitoring vendor updates is recommended.
CVE-2026-101265: Inclusion of Sensitive Information in Source Code in Intelbras TIP 125i
Description
CVE-2026-101265 is a vulnerability in Intelbras TIP 125i versions 4.3.35 and 4.3.41 where sensitive information is included in the source code due to an issue in an unknown function of the Básico Page component. The vulnerability can be exploited remotely but requires high attack complexity and is difficult to exploit. Exploit code is publicly available, though no known exploits are reported in the wild. The CVSS 4.0 score is low (2.3).
CVSS v4.0
Score 2.3low
Affected software
Intelbras
TIP 125i
cpe:2.3:h:intelbras:tip_125i:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves the inclusion of sensitive information in the source code of Intelbras TIP 125i versions 4.3.35 and 4.3.41. The affected component is an unknown function within the Básico Page. The vulnerability can be triggered remotely but has a high complexity and low exploitability. Public exploit code exists, but there are no reports of active exploitation. The vendor was notified early about this issue. The CVSS 4.0 vector indicates network attack vector, high complexity, low confidentiality impact, and no privileges or user interaction required.
Potential Impact
Sensitive information exposure in source code could potentially aid attackers in further attacks or reconnaissance. However, the low CVSS score and high attack complexity suggest limited immediate impact. No known active exploitation has been reported.
Mitigation Recommendations
No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the high complexity and low exploitability, immediate urgent action may not be required, but monitoring vendor updates is recommended.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-28T11:41:07.968Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6abb1b0bf7a7c541069f1973
Added to database: 09/29/2026, 01:57:31 UTC
Last enriched: 09/29/2026, 01:58:03 UTC
Last updated: 09/29/2026, 03:51:57 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.