Live › vulnerability › CVE-2026-118601
Go to dashboardAlpine iLX-F511 devices ship with hard-coded SSH credentials, so anyone who knows them can log in over SSH. An attacker who connects to the SSH service can run code as the telechips user on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Owners of Alpine iLX-F511 devices with the SSH service reachable from the local network. The sources do not describe firmware versions, so unknown whether a firmware update removes the credentials. Teams with no Alpine iLX-F511 units can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the SSH service. The issue results from the use of hard-coded credentials. An attacker can leverage this vulnerability to execute code in the context of the telechips user. Was ZDI-CAN-29013.
This page as .md · .json · in your agent: get_signal("CVE-2026-118601")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.