{"id":"CVE-2026-118602","aliases":[],"cve":{"records":[{"id":"CVE-2026-118602","source":"zdi","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-28T16:48:42.887Z","published":"2026-10-28T16:50:03.229Z","modified":"2026-10-28T16:50:03.229Z"}],"publishers":[{"name":"zdi","role":"CNA","organizationId":"99f1926a-a320-47d8-bbb5-42feb611262e","modified":"2026-10-28T16:50:03.229Z"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-820/","tags":["x_research-advisory"],"source":"zdi"}],"weaknesses":[{"id":"CWE-749","description":"CWE-749: Exposed Dangerous Method or Function","source":"zdi"}],"applicability":[],"prioritization":[]},"title":"Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability","titleSource":"zdi","descriptionSource":"zdi","description":"Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the Fiv service. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-29095.","score":7.8,"severity":"high","published":"2026-10-28T16:50:03.229Z","modified":"2026-10-28T16:50:03.229Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Alpine","name":"iLX-F511","platforms":[],"versions":[{"version":"7.0.000","status":"affected"}],"defaultStatus":"unknown","cpes":[],"source":"zdi","url":"https://www.cve.org/CVERecord?id=CVE-2026-118602"}],"remediation":[],"references":["https://www.zerodayinitiative.com/advisories/ZDI-26-820/"],"sources":[{"name":"CVE","id":"CVE-2026-118602","modified":"2026-10-28T16:50:03.229Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-118602"}],"assessments":[{"source":"zdi","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8}],"sourceAffected":[],"observedAt":"2026-10-29T14:37:25.295Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T16:25:31.632Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"Alpine iLX-F511 version 7.0.000 has a local privilege escalation vulnerability due to an exposed dangerous method in the Fiv service, allowing attackers with low-privileged code execution to escalate privileges. An attacker must first obtain the ability to execute low-privileged code on the target system. The vulnerability may allow arbitrary code execution as root.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:26:11.387Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-118602"}]}}