Unauthenticated Intelbras Camera Firmware Endpoint Enables Denial of Service

Oct 28, 2026 · Original article ↗

Summary

Researchers found an unauthenticated firmware-update endpoint in Intelbras IP cameras that can reboot devices offline; periodic requests can sustain the denial of service. Intelbras fixed it in firmware R.260804.

Key points

The firmware-upgrade endpoint lacked authentication and could be reached by anyone with access to the camera’s local Wi-Fi network.
A POST request triggers a reboot even when the submitted firmware is invalid; one request can take a camera offline for about a minute, while periodic requests can keep it offline indefinitely.
Researchers demonstrated the issue on an iM3B-C running firmware v240927. The article says that firmware is also compatible with the iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC models.
The researchers explain that the vulnerable firmware proceeded directly to the update routine without authentication checks; the fixed firmware validates cookies and session data.
Intelbras released firmware R.260804 with update instructions. The article says the issue is absent from the latest firmware.
The vulnerability has candidate ID CAN-2026-2035970; a final CVE assignment is pending. Intelbras reported a Medium severity rating of 5.1 under CVSS 4.0.

Article Details

Attack Vectors: An unauthenticated firmware-upgrade endpoint on affected Intelbras cameras can be reached by anyone with access to the local Wi-Fi network.
An HTTP POST to the endpoint triggers a camera reboot without verifying that the submitted firmware is valid; repeated requests can keep the camera offline.
Defensive Notes: Install the updated firmware R.260804 and follow Intelbras’ update instructions.
Check the installed firmware version and update to the latest available release. The fixed firmware requires authentication for updates and validates cookies and session data.

MITRE ATT&CK

T1499.004 · Application or System ExploitationThe unauthenticated firmware-upgrade request triggers a reboot that takes the camera offline, and repeated requests can sustain the denial of service.

Vendors

IntelbrasDuring our research, we discovered a denial-of-service vulnerability that affects Intelbras IP cameras systems.

Products

iM3B-CWe obtained the firmware version v240927 for the iM3B-C (IM3 C) camera, which was the latest available version at the time of our research.iM4 CAccording to Intelbras, the same firmware is also compatible with the iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC models.iM5 SCAccording to Intelbras, the same firmware is also compatible with the iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC models.iM7+ FCAccording to Intelbras, the same firmware is also compatible with the iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC models.iME 360 CAccording to Intelbras, the same firmware is also compatible with the iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC models.iMX CAccording to Intelbras, the same firmware is also compatible with the iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC models.Intelbras Mibo SmartThe Intelbras Mibo Smart app, which the company provides to connect and manage the devices mentioned in this report, has over 4,000,000 downloads.

Countries