ZDI 2026-10-28

ZDI-26-820: (0Day) (Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability

From Zero Day Initiative ↗

This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.

Read the full advisory on ZDI →

Related advisories

2026-10-28 ZDI ZDI-26-828: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability Unauthenticated remote code execution via a stack-based buffer overflow in the Android Auto service stack of Alpine iLX-F511 devices.
2026-10-28 ZDI ZDI-26-829: (0Day) (Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability Heap-based buffer overflow in Bluetooth OBEX packet handling can be triggered without authentication. Exploitation requires the attacker to be…
2026-10-28 ZDI ZDI-26-819: (0Day) (Pwn2Own) Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability The advisory notes that Alpine iLX-F511 devices can be remotely compromised without authentication.
2026-10-28 ZDI ZDI-26-821: (0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability A stack-based buffer overflow in the vCard parsing code can be triggered via Bluetooth on Alpine iLX-F511 devices.
2026-10-28 ZDI ZDI-26-822: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability The advisory notes a stack-based buffer overflow in the Alpine iLX-F511 service stack that can be triggered without authentication. Exploitation…