CVE-2026-118606 Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

EUVD-2026-112200

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

CVE-2026-118606

The Alpine iLX-F511 device is vulnerable to Remote Code Execution (RCE) due to an exposed dangerous function within its framework service . This flaw allows network-adjacent attackers to execute arbitrary code with root privileges without any authentication. While the vulnerability is documented ...

CVE-2026-118605 Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

EUVD-2026-112199

Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

CVE-2026-118605

The Alpine iLX-F511 device is vulnerable to a stack-based buffer overflow in the prh_sdp_service_search_decode function. The root cause is the lack of proper validation of user-supplied data length before copying it to a stack-based buffer. A network-adjacent attacker who can pair a malicious Blu...

CVE-2026-118604 Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...

EUVD-2026-112197

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...

CVE-2026-118604

The Alpine iLX-F511 devices are vulnerable to a stack-based buffer overflow in the framework service . The root cause is the lack of proper validation on the length of user-supplied data before copying it to a fixed-length stack-based buffer. A physically present attacker can exploit this flaw to...

CVE-2026-118603 Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must...

EUVD-2026-112196

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118603

The Alpine iLX-F511 is vulnerable to a stack-based buffer overflow during the parsing of vCard data . The root cause is the lack of proper validation of user-supplied data before copying it to a fixed-length stack-based buffer. This flaw allows a network-adjacent attacker to execute arbitrary cod...

EUVD-2026-112195

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target syste...

CVE-2026-118602

The Alpine iLX-F511 system contains a local privilege escalation vulnerability within the Fiv service . The root cause is an exposed dangerous method (CWE-749) that allows a local attacker to bypass security controls. By first obtaining the ability to execute low-privileged code, an attacker can ...

CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

EUVD-2026-112194

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

CVE-2026-118601

The Alpine iLX-F511 devices are vulnerable to Remote Code Execution (RCE) due to the use of hard-coded credentials within the SSH service . This flaw allows network-adjacent attackers to execute arbitrary code without authentication, specifically in the context of the telechips user . No specific...

CVE-2026-117616

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system as an agent configuration, and to overwrite an arbitrary...

EUVD-2026-112181

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system as an agent configuration, and to overwrite an arbitrary...

CVE-2026-117616

Versions of Jenkins 2.587 and earlier , and LTS 2.580.1 and earlier , are vulnerable to an issue where an HTTP endpoint loads agents by name without proper validation. This allows an attacker with Overall/Read permission to load any config.xml file from the controller file system as an agent conf...