CVE-2026-12503

This CVE affects Loytec LINX firmware (LINX-A64) up to version 8.4.16 across L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD. Vulnerability: Improper Link Resolution (CWE-59) in /usr/bin/larm_starter. Cause: symlink attack on /etc/lighttpd/ssl/server.pem allows an authenticated larmapp to ma...

CVE-2026-12503 Loytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starter

Improper Link Resolution CWE-59 in /usr/bin/larmstarter in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated larmapp attacker to make /etc/passwd writable by the larmapp group leading to root privilege escalation via a symlink attack on...

PT-2026-64297

Name of the Vulnerable Software and Affected Versions Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec L-VIS versions prior to 8.4.17 Loytec L-PAD...