CVE-2026-118606: Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability
Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the framework service. The issue results from an exposed dangerous function. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-29006.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
An attacker must be network-adjacent to the affected device. No authentication or prior privileges are required.
What is the impact if exploitation succeeds?
An attacker can execute arbitrary code in the context of root, resulting in full compromise of confidentiality, integrity, and availability on the affected device.
Which component is affected?
The vulnerability is in the framework service on Alpine iLX-F511 devices. It is caused by an exposed dangerous function in that service.