Live › vulnerability › CVE-2026-118607
Go to dashboardThe diagapp component of Alpine iLX-F511 devices passes a user-supplied string into a system call without validating it. A physically present attacker can run arbitrary code as root without logging in.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Owners and installers of Alpine iLX-F511 devices. The sources describe a physical attack, so the exposure depends on who can reach the unit's diagnostic interface; the sources do not say how that interface is reached or whether a firmware update exists.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the diagapp component. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28750.
This page as .md · .json · in your agent: get_signal("CVE-2026-118607")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.