CVE-2026-12502— Loytec LINX firmware: Improper Privilege Management in /usr/bin/ltsudo
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-12502
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Loytec LINX firmware: Improper Privilege Management in /usr/bin/ltsudo
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to reset the password of any LARM user (including the `larmapp` service account) via the `set-passwd` subcommand.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-12502
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-12502
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-12502 (1)
Same Patch Batch · Loytec · 2026-07-24 · 9 CVEs total
| CVE-2026-12503 | 9.2 CRITICAL | Loytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starter |
| CVE-2026-12496 | 8.7 HIGH | Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server |
| CVE-2026-55730 | 8.7 HIGH | Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802 |
| CVE-2026-55732 | 8.7 HIGH | Loytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod) |
| CVE-2026-12504 | 8.4 HIGH | Loytec LINX firmware: Improper Authentication in PAM configuration |
| CVE-2026-55729 | 7.7 HIGH | Loytec LWEB802: Exposure of Sensitive Information in browser localStorage |
| CVE-2026-55731 | 6.6 MEDIUM | Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent |
| CVE-2026-55728 | 3.8 LOW | Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflict |
IV. Related Vulnerabilities
Same product: LIP-ME20xC
- CVE-2026-55732
Loytec LINX firmware: Out-of-bounds Read in BACnet packet pa - CVE-2026-55731
Loytec LINX firmware: Unchecked input for loop condition in - CVE-2026-55728
Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipa - CVE-2026-12504
Loytec LINX firmware: Improper Authentication in PAM configu - CVE-2026-12503
Loytec LINX firmware: Improper Link Resolution in /usr/bin/l
Same vendor: Loytec
- CVE-2026-55732
Loytec LINX firmware: Out-of-bounds Read in BACnet packet pa - CVE-2026-55731
Loytec LINX firmware: Unchecked input for loop condition in - CVE-2026-55730
Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802 - CVE-2026-55729
Loytec LWEB802: Exposure of Sensitive Information in browser - CVE-2026-55728
Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipa
Same weakness: CWE-269
- CVE-2026-16743
Accountsservice: accountsservice: arbitrary file read via se - CVE-2026-10610
Local privilege escalation in ESET security applications for - CVE-2026-7483
Local privilege escalation in ESET security applications for - CVE-2026-12736
WPify Woo <= 5.4.16 - Authenticated (Shop Manager+) Privileg - CVE-2026-16764
OWASP DefectDojo API/Web serializers.py UserSerializer privi
V. Comments for CVE-2026-12502
No comments yet