Millions of security cameras at risk: DoS vulnerability in Intelbras devices

A denial-of-service vulnerability was discovered in Intelbras IP cameras, affecting models including iM3B-C, iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC. The flaw exists in an unauthenticated firmware update endpoint at /firmwareUpgrade_service/Demo, which allows any user on the local network to send a POST request causing the camera to reboot, resulting in a persistent DoS condition. The vulnerability was assigned candidate ID CAN-2026-2035970 and classified as Medium severity (CVSS 4.0: 5.1). Intelbras released a patched firmware version R.260804 to address the issue by enforcing authentication on the endpoint.

AI-extracted · verify before operational use