---
id: "CVE-2026-124577"
page: "https://infrastack.ai/live/CVE-2026-124577"
kind: "vulnerability"
aliases: ["CVE-2026-124577"]
title: "Intelbras SG 2404 switch: web interface flaw allows remote improper authentication bypass"
severity: "critical"
cvss: 10.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "intelbras", "network-switch", "web-management"]
not_affected_if: ["management-interface-isolated", "other-firmware-versions"]
published_at: "2026-11-09T08:17:02+00:00"
first_seen_at: "2026-11-09T08:25:21+00:00"
updated_at: "2026-11-09T08:25:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124577", "first_seen_at": "2026-11-09T08:25:21+00:00"}]
exploit_sources: []
---

# Intelbras SG 2404 switch: web interface flaw allows remote improper authentication bypass

Link for people: https://infrastack.ai/live/CVE-2026-124577 (this .md is for agents)

The web management interface of the Intelbras SG 2404 PoE L2+ switch has an authentication weakness in its /EXCU_SHELL file. A remote attacker can exploit it to get past authentication, and a public exploit has been released.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the firmware version in the switch's web management interface; versions `1.00.70` and `1.00.72` are affected
- Confirm whether the switch's web management interface is reachable from the internet or untrusted networks

## Fix

- Intelbras SG 2404 PoE L2+: upgrade to version `1.00.74`

## Timeline

- 2026-11-09T08:25:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124577

## From the sources

A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.00.74 is sufficient to fix this issue. Upgrading the affected component is advised.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_