ZDI 2026-10-28

ZDI-26-824: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

Machine-generated analysis · WAYSCloud LLM

Unauthenticated remote code execution is possible on Alpine iLX-F511 devices via a network-adjacent attack.

Context

The advisory concerns Alpine iLX-F511 framework service. It describes an unauthenticated remote code execution vulnerability that can be triggered by network-adjacent attackers. The ZDI assigned a CVSS score of 8.8.

Operator considerations

Check: inventory Alpine iLX-F511 devices and verify if the framework service is enabled.
Isolate: consider network segmentation for these devices to limit exposure.
Log: enable logging of access attempts to the framework service if possible.

From Zero Day Initiative ↗

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.

Read the full advisory on ZDI →

Related advisories