CVE-2026-118601: Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability
Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the SSH service. The issue results from the use of hard-coded credentials. An attacker can leverage this vulnerability to execute code in the context of the telechips user. Was ZDI-CAN-29013.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Affected Alpine iLX-F511 devices are exposed to network-adjacent attackers through the device's SSH service. Exploitation does not require prior authentication or user interaction.
What level of access can an attacker gain?
An attacker can execute arbitrary code in the context of the telechips user. The reported impact includes compromise of confidentiality, integrity, and availability.
What configuration is affected?
The issue is associated with the SSH service and results from hard-coded credentials. The provided information does not identify a configuration change that disables or mitigates the affected behavior.