CVE-2022-40005: Intelbras Wifiber 120ac Inmesh Firmware

High severity, CVSS 8.8. EPSS: 35% chance of exploitation in the next 30 days.

Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute.

Affected products

• Intelbras Wifiber 120ac Inmesh Firmware: from 1.1-220216, before 1.1-220826 (fixed in 1.1-220826)

Published 2022-12-25. Last modified 2026-06-17.