ZDI 2026-10-28

ZDI-26-819: (0Day) (Pwn2Own) Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability

From Zero Day Initiative ↗

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3.

Read the full advisory on ZDI →

Related advisories

2026-10-28 ZDI ZDI-26-828: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability Unauthenticated remote code execution via a stack-based buffer overflow in the Android Auto service stack of Alpine iLX-F511 devices.
2026-10-28 ZDI ZDI-26-829: (0Day) (Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability Heap-based buffer overflow in Bluetooth OBEX packet handling can be triggered without authentication. Exploitation requires the attacker to be…
2026-10-28 ZDI ZDI-26-820: (0Day) (Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability The advisory reports a local privilege escalation vulnerability in Alpine iLX-F511 that requires prior low-privileged code execution.
2026-10-28 ZDI ZDI-26-821: (0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability A stack-based buffer overflow in the vCard parsing code can be triggered via Bluetooth on Alpine iLX-F511 devices.
2026-10-28 ZDI ZDI-26-822: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability The advisory notes a stack-based buffer overflow in the Alpine iLX-F511 service stack that can be triggered without authentication. Exploitation…