CVE-2026-2564

Intelbras · VIP 3260 Z IA 2

A high-severity security flaw has been identified in the Intelbras VIP 3260 Z IA 2 camera, which could permit unauthorized access or system interference.

Executive summary

The Intelbras VIP 3260 Z IA 2 camera contains a significant security vulnerability that could allow attackers to compromise the device's integrity and access sensitive video feeds.

Vulnerability

While specific technical details are limited in the initial disclosure, the flaw is classified as high-severity (CVSS 8.1) and affects the core operations of the Intelbras VIP 3260 Z IA 2 hardware, likely involving improper access controls or input validation.

Business impact

A compromise of physical security infrastructure can lead to unauthorized surveillance, loss of privacy, and the potential use of the device as a pivot point for broader network attacks. The CVSS score of 8.1 indicates a high risk to organizational security, particularly for facilities relying on these cameras for safety and monitoring.

Remediation

Immediate Action: Apply the latest security updates provided by Intelbras for the VIP 3260 Z IA 2 model immediately.

Proactive Monitoring: Review device access logs for unauthorized login attempts and monitor network traffic for unusual data outbound from the camera's IP address.

Compensating Controls: Isolate security cameras on a dedicated VLAN with strict ingress and egress filtering to prevent unauthorized access from the primary corporate network.

Exploitation status

Public Exploit Available: false

Analyst recommendation

It is critical to treat this high-severity vulnerability as a priority for the physical security team. Immediately verify current firmware versions and apply vendor-supplied patches to mitigate the risk of unauthorized access to the surveillance network.