CVE-2026-118605

The Alpine iLX-F511 device is vulnerable to a stack-based buffer overflow in the prh_sdp_service_search_decode function. The root cause is the lack of proper validation of user-supplied data length before copying it to a stack-based buffer. A network-adjacent attacker who can pair a malicious Blu...

CVE-2026-118604 Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...

EUVD-2026-112197

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...

CVE-2026-118604

The Alpine iLX-F511 devices are vulnerable to a stack-based buffer overflow in the framework service . The root cause is the lack of proper validation on the length of user-supplied data before copying it to a fixed-length stack-based buffer. A physically present attacker can exploit this flaw to...

CVE-2026-118603 Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must...

EUVD-2026-112196

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118603

The Alpine iLX-F511 is vulnerable to a stack-based buffer overflow during the parsing of vCard data . The root cause is the lack of proper validation of user-supplied data before copying it to a fixed-length stack-based buffer. This flaw allows a network-adjacent attacker to execute arbitrary cod...

EUVD-2026-112195

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target syste...

CVE-2026-118602

The Alpine iLX-F511 system contains a local privilege escalation vulnerability within the Fiv service . The root cause is an exposed dangerous method (CWE-749) that allows a local attacker to bypass security controls. By first obtaining the ability to execute low-privileged code, an attacker can ...

CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

EUVD-2026-112194

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

CVE-2026-118601

The Alpine iLX-F511 devices are vulnerable to Remote Code Execution (RCE) due to the use of hard-coded credentials within the SSH service . This flaw allows network-adjacent attackers to execute arbitrary code without authentication, specifically in the context of the telechips user . No specific...

CVE-2026-117616

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system as an agent configuration, and to overwrite an arbitrary...

EUVD-2026-112181

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system as an agent configuration, and to overwrite an arbitrary...

CVE-2026-117616

Versions of Jenkins 2.587 and earlier , and LTS 2.580.1 and earlier , are vulnerable to an issue where an HTTP endpoint loads agents by name without proper validation. This allows an attacker with Overall/Read permission to load any config.xml file from the controller file system as an agent conf...

EUVD-2026-112179

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent Launcher Plugin without checking whether they have been approved by an administrator, allowing attackers with Agent/Configure permission to...

CVE-2026-117614

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent Launcher Plugin without checking whether they have been approved by an administrator, allowing attackers with Agent/Configure permission to...

CVE-2026-117614

Jenkins versions 2.587 and earlier (and LTS 2.580.1 and earlier ) are vulnerable to arbitrary code execution. The software converts launch commands in older agent configurations into launchers provided by the Command Agent Launcher Plugin without verifying administrator approval. An attacker with...

CVE-2026-117612

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the resolves-to attribute during XStream deserialization...

EUVD-2026-112167

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YAN...