---
title: Kaspersky: unauthenticated local firmware-update endpoint on Intelbras IP cameras lets anyone on the Wi-Fi knock cameras offline until firmware R.260804 | ctxsec
url: https://ctxsec.com/items/intelbras-camera-unauth-firmware-endpoint-dos
description: ""
status: "primary (Kaspersky GReAT, Oct 28); vendor patched in firmware R.260804; MITRE CAN-2026-2035970 pending CVE, CVSS 4.0 5.1 Medium per Intelbras/Kaspersky"
published: 2026-10-28
---

> 

[← Cybersecurity News](/news) · [markdown](/items/intelbras-camera-unauth-firmware-endpoint-dos.md)

primary (Kaspersky GReAT, Oct 28); vendor patched in firmware R.260804; MITRE CAN-2026-2035970 pending CVE, CVSS 4.0 5.1 Medium per Intelbras/Kaspersky

2026-10-28

### Kaspersky: unauthenticated local firmware-update endpoint on Intelbras IP cameras lets anyone on the Wi-Fi knock cameras offline until firmware R.260804

Kaspersky GReAT (João Victor) describes a denial-of-service in Intelbras IP camera firmware: a **firmware update endpoint reachable without authentication** on the local network. One request disrupts the camera for about a minute; periodic requests keep it offline. Lab work used firmware **v240927** on an iM3B-C; Intelbras says the same image covers iMX C, iM4 C, iM5 SC, iME 360 C and iM7+ FC.

After disclosure, Intelbras shipped firmware **R.260804** and SD-card update instructions. MITRE issued candidate **CAN-2026-2035970** (CVE pending); Intelbras told Kaspersky the issue is Medium at **CVSS 4.0 5.1**. **What to do:** inventory Intelbras MiBO/IM cameras, apply R.260804+, keep camera Wi-Fi/VLANs off guest and corporate user networks, and monitor for repeated hits on firmware-update URLs from non-admin hosts.

Sources: [Kaspersky Securelist: Millions of security cameras at risk — DoS in Intelbras devices (Oct 28)](https://securelist.com/intelbras-camera-vulnerability/121131/)