ZDI-26-829: Published Advisories
Published Oct 28, 2026
·Updated
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-118611.
Affected Software
0 affected components
Event History
Oct 28, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
Who is exposed to this issue?
Installations of Alpine iLX-F511 devices are exposed if an attacker can be physically present at the device. The available information does not identify any network-based attack path.
2
Does exploitation require credentials or prior authentication?
No. Authentication is not required to exploit the vulnerability.
3
What level of access could an attacker gain?
A physically present attacker could execute arbitrary code on an affected device.