Live › vulnerability › CVE-2026-118602
Go to dashboardThe Fiv service on the Alpine iLX-F511 exposes a dangerous method that a local low-privileged user can call. An attacker who already runs code on the device can escalate to root and execute arbitrary code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Owners of Alpine iLX-F511 head units. The attacker must already run low-privileged code on the device (for example via another of the iLX-F511 bugs disclosed the same day), then can reach root through the Fiv service. Other hardware can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| iLX-F511 | hardware | all firmware versions; no range published (unknown) | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the Fiv service. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-29095.
This page as .md · .json · in your agent: get_signal("CVE-2026-118602")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.