early signals ZDI published infra

ZDI-26-819: (0Day) (Pwn2Own) Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability

// AI summary

Alpine iLX-F511 devices have a 0Day SSH vulnerability (ZDI-26-819) allowing network-adjacent attackers to execute arbitrary code without authentication.

// from the source

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3.
Read at zerodayinitiative.com ↗ More from ZDI published

# more from ZDI published

  1. ZDI published infra

    ZDI-26-839: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com
  2. ZDI published infra

    ZDI-26-840: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability

    zerodayinitiative.com
  3. ZDI published infra

    ZDI-26-841: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  4. ZDI published infra

    ZDI-26-842: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  5. ZDI published infra

    ZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com