CVE-2026-118607Medium· 6.8▾ Midnight0dayAlpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit thi…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 37.4 · likelihood 0.2 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.9%
Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the diagapp component. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28750.
iLX-F511 7.0.000Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-118604Medium· 6.8Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-118605High· 8.0Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-118601Medium· 6.3Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability
CVE-2026-118602High· 7.8Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability
CVE-2026-118603High· 8.0Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-118606High· 8.8Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability