Kaspersky GReAT (João Victor) describes a denial-of-service in Intelbras IP camera firmware: a firmware update endpoint reachable without authentication on the local network. One request disrupts the camera for about a minute; periodic requests keep it offline. Lab work used firmware v240927 on an iM3B-C; Intelbras says the same image covers iMX C, iM4 C, iM5 SC, iME 360 C and iM7+ FC.

After disclosure, Intelbras shipped firmware R.260804 and SD-card update instructions. MITRE issued candidate CAN-2026-2035970 (CVE pending); Intelbras told Kaspersky the issue is Medium at CVSS 4.0 5.1. What to do: inventory Intelbras MiBO/IM cameras, apply R.260804+, keep camera Wi-Fi/VLANs off guest and corporate user networks, and monitor for repeated hits on firmware-update URLs from non-admin hosts.