CVE-2026-118602: Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability

Published Oct 28, 2026
·
Updated

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the Fiv service. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-29095.

Affected Software

1 affected component
Alpine iLX-F511

Event History

Oct 28, 2026
CVE Published
via MITRE·04:50 PM
Data Sourced
via MITRE·04:50 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Who is exposed to this vulnerability?

Affected Alpine iLX-F511 installations are exposed when an attacker can already execute code locally with low privileges. The issue is in the Fiv service.

2

What does an attacker need to exploit it?

The attacker needs the ability to execute low-privileged code on the target system. No user interaction is indicated in the provided severity vector.

3

What is the impact of successful exploitation?

Successful exploitation lets a local attacker escalate privileges and execute arbitrary code in the context of root. This can affect confidentiality, integrity, and availability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203