Live › vulnerability › CVE-2026-118606
Go to dashboardThe framework service on Alpine iLX-F511 devices exposes a dangerous function that an attacker on the local network can call. Successful exploitation runs arbitrary code with root privileges on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Owners of Alpine iLX-F511 devices on a network where an attacker could reach the device. The sources do not name affected firmware versions or say whether any setting turns the exposure off. Teams without these devices can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| iLX-F511 | vendor | all firmware versions (unspecified by ZDI) | – |
5.0.001 laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the framework service. The issue results from an exposed dangerous function. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-29006.
This page as .md · .json · in your agent: get_signal("CVE-2026-118606")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.