ZDI-26-828: Published Advisories

Published Oct 28, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-118610.

Affected Software

0 affected components

Event History

Oct 28, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

Who is exposed to exploitation?

Installations of Alpine iLX-F511 devices that are reachable by a network-adjacent attacker are exposed. The advisory states that no authentication is required.

What level of access does an attacker need?

An attacker must be network-adjacent to the affected device. No valid account or other authentication is needed to exploit the issue.

What could successful exploitation allow?

Successful exploitation can allow an unauthenticated network-adjacent attacker to execute arbitrary code on an affected Alpine iLX-F511 device.

ZDI-26-828: Published Advisories

Affected Software

Event History

Frequently Asked Questions

Who is exposed to exploitation?

What level of access does an attacker need?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to exploitation?

What level of access does an attacker need?

What could successful exploitation allow?