Intelbras

Mentions · 7d3
Mentions · 30d3
All mentions4
First seenAug 17, 2026
Last mentioned1d ago

Timeline

4 articles · newest first

Lumen says Volt Typhoon banks Silent Train access in infrastructure

Lumen says the group rotates exploited SOHO, IoT and enterprise devices, including multiple zero-days, against high-value targets.

CSO OnlineOct 30, 00:10 UTC · 1d agoThreat actorExploited14 sources1

Volt Typhoon uses Silent Train relays for zero-day edge attacks

Black Lotus Labs says four confirmed zero-days hit VeloCloud, Cisco SD-WAN, N-central, and Versa Director.

BleepingComputerupdated Oct 30, 00:10 UTC · 1d agofirst Oct 28, 16:00 UTC · 3d agoThreat actorExploited14 sourcesCVE-2026-16812 CVE-2026-20127 CVE-2025-8875+21

Intelbras cameras allow unauthenticated firmware updates that cause DoS

A local Wi-Fi attacker can keep cameras offline by repeatedly posting to an unauthenticated upgrade endpoint; firmware R.260804 requires authentication.

Kaspersky SecurelistOct 28, 10:00 UTC · 3d agoVulnerability

IoT Under Siege: The Anatomy of the Latest Mirai Campaign Leveraging Multiple IoT Exploits

Unit 42 tracks a Mirai botnet campaign exploiting over 20 IoT vulnerabilities in routers, cameras and DVRs to build DDoS botnets since March 2023.

Palo Alto Unit 42Aug 17, 13:04 UTC · Aug 17, 2026MalwareExploitedCVE-2019-12725 CVE-2019-17621 CVE-2019-20500+133 · 1 read

Related CVEs

by mentions

CVE-2026-2012789%10.0
Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator
published Feb 25, 2026Cisco Catalyst SD-WAN Controller (formerly SD-WAN vSmart)KEV
CVE-2022-2930398%9.8
Unauthenticated Command Injection in Contec SolarView Compact
published May 12, 2022Contec SolarView Compact (SV-CPT-MC310 firmware)KEVPoC ×2
CVE-2022-30525100%9.8
OS Command Injection in Zyxel Firewalls Enables Remote Command Execution
published May 12, 2022ZyxelKEVPoC ×3
CVE-2025-88764%9.4
OS Command Injection in N-able N-central Before 2025.3.1
published Aug 14, 2025N-able N-centralKEV
CVE-2024-397174%7.2
Unrestricted File Upload in Versa Networks Versa Director Exploited by Volt Typhoon
published Aug 22, 2024Versa Networks Versa DirectorKEV
CVE-2022-4569977%9.8
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as…
published Feb 10, 2023apsystems ecu-r firmwarePoC ×2
CVE-2022-3149965%9.8
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo
published Aug 25, 2022nortekcontrol emerge e3 firmwarePoC ×2
CVE-2021-4642294%9.8
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication
published Apr 27, 2022telesquare sdt-cs3b1 firmwarePoC ×2
CVE-2022-270025%9.8
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters
published Mar 15, 2022commscope arris tr3300 firmwarePoC
CVE-2022-3002339%8.8
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function
published Jun 16, 2022tenda hg9 firmwarePoC

Appears with

Netgearvendor · 3
Volt Typhoonthreat actor · 2
Netgear Orbiproduct · 2
Black Lotus Labsorganization · 2
Lumenorganization · 2
FBIorganization · 1
N-ablevendor · 1
CISAorganization · 1
TP-Link Archerproduct · 1
VeloCloud Orchestratorproduct · 1
MITREorganization · 1
NCSCorganization · 1
KV-Botnetmalware · 1
iM3B-Cproduct · 1
Zyxelvendor · 1
TP-Linkvendor · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.