CVE-2026-118607 Alpine iLX-F511 diagapp Command Injection Vulnerability

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the diagapp...

CVE-2026-118606 Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

EUVD-2026-112200

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

CVE-2026-118606

The Alpine iLX-F511 device is vulnerable to Remote Code Execution (RCE) due to an exposed dangerous function within its framework service . This flaw allows network-adjacent attackers to execute arbitrary code with root privileges without any authentication. While the vulnerability is documented ...

CVE-2026-118605 Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

EUVD-2026-112199

Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

CVE-2026-118605

The Alpine iLX-F511 device is vulnerable to a stack-based buffer overflow in the prh_sdp_service_search_decode function. The root cause is the lack of proper validation of user-supplied data length before copying it to a stack-based buffer. A network-adjacent attacker who can pair a malicious Blu...

CVE-2026-118604 Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...

EUVD-2026-112197

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...

CVE-2026-118604

The Alpine iLX-F511 devices are vulnerable to a stack-based buffer overflow in the framework service . The root cause is the lack of proper validation on the length of user-supplied data before copying it to a fixed-length stack-based buffer. A physically present attacker can exploit this flaw to...

CVE-2026-118603 Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must...

EUVD-2026-112196

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118603

The Alpine iLX-F511 is vulnerable to a stack-based buffer overflow during the parsing of vCard data . The root cause is the lack of proper validation of user-supplied data before copying it to a fixed-length stack-based buffer. This flaw allows a network-adjacent attacker to execute arbitrary cod...

EUVD-2026-112195

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target syste...

CVE-2026-118602

The Alpine iLX-F511 system contains a local privilege escalation vulnerability within the Fiv service . The root cause is an exposed dangerous method (CWE-749) that allows a local attacker to bypass security controls. By first obtaining the ability to execute low-privileged code, an attacker can ...

CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

EUVD-2026-112194

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

CVE-2026-118601

The Alpine iLX-F511 devices are vulnerable to Remote Code Execution (RCE) due to the use of hard-coded credentials within the SSH service . This flaw allows network-adjacent attackers to execute arbitrary code without authentication, specifically in the context of the telechips user . No specific...

CVE-2024-3806

CVE-2024-3806 Porto = 7.1.0 - Unauthenticated Local File Inclusion via portoajaxposts Description The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'portoajaxposts' function. This makes it possible for unauthenticated attackers...

CVE-2026-117616

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system as an agent configuration, and to overwrite an arbitrary...