What is GHSA-534x-8vf3-m22c?

GHSA-534x-8vf3-m22c is a security advisory published by GitHub Security Advisories with Medium severity. Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically...

Which CVE IDs does GHSA-534x-8vf3-m22c cover?

GHSA-534x-8vf3-m22c covers the following CVE IDs: CVE-2026-118607. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-534x-8vf3-m22c?

GHSA-534x-8vf3-m22c has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-534x-8vf3-m22cMediumCVSS 6.8

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-118607 →

📋 Description

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the diagapp component. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28750.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-118607
https://www.zerodayinitiative.com/advisories/ZDI-26-825
https://github.com/advisories/GHSA-534x-8vf3-m22c