CVE-2026-36438 describes a medium severity vulnerability in Intelbras VIP-1230-D-G4 firmware version V2.800.00IB00C.0.T. The issue allows remote attackers to obtain sensitive information by exploiting the password reset functionality exposed at the /OutsideCmd endpoint. The vulnerability does not require privileges or user interaction and has a low attack complexity. The CVSS vector indicates no impact on integrity or availability, only confidentiality is affected. No patch or official remediation guidance is currently provided by the vendor, and no exploits are known to be active in the wild.

Successful exploitation could lead to unauthorized disclosure of sensitive information via the password reset mechanism. The confidentiality impact is limited, with no direct impact on integrity or availability. The vulnerability can be exploited remotely without authentication, increasing risk exposure. However, the absence of known exploits and lack of reported active attacks reduce immediate threat urgency.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /OutsideCmd endpoint if possible, and monitor for unusual password reset activity. Avoid exposing the device directly to untrusted networks. Follow up with Intelbras for updates on patches or mitigations.