All vulnerabilities
CVE-2026-118602

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability

Alpine iLX-F511
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationExploitation reported1 outlet report it, first 28 Oct 2026. Not yet in the KEV catalogReports
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 28 Oct 2026, 16:50 UTCPublishedCVE List
  2. 28 Oct 2026, 19:56 UTCExploit code publicBluesky: CVE posts
  3. 28 Oct 2026, 19:56 UTCFirst reported exploitedBluesky: CVE posts
  4. NowNot on CISA's known exploited list yet

Reports 1

One outlet reports exploitation. Reports are not confirmation; each links to its source.

Description

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the Fiv service. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-29095.

Text from CVE List

Affected versions 1

  • iLX-F511affected: 7.0.000CVE List

References 1