CVE-2026-124577 · Infrastructure
NO FIX YET · SEE WHAT TO DO
The web management interface of the Intelbras SG 2404 PoE L2+ switch has an authentication weakness in its /EXCU_SHELL file. A remote attacker can exploit it to get past authentication, and a public exploit has been released.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Owners of Intelbras SG 2404 PoE L2+ switches running firmware 1.00.70 or 1.00.72 that expose the web management interface to the network or internet. Switches with the management interface isolated from untrusted networks have reduced exposure but should still be updated.
Not affected if management-interface-isolated, other-firmware-versions
Who cares intelbras, network-switch, web-management
1.00.70 and 1.00.72 are affected1.00.74A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.00.74 is sufficient to fix this issue. Upgrading the affected component is advised.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.