VULNERABILITY INTELLIGENCE

CVE-2026-12503

EPSS probability0.18%
CISA KEVNot currently listed
Published2026-07-24
Last modified2026-07-27

Description

Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter` in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated `larmapp` attacker to make `/etc/passwd` writable by the `larmapp` group (leading to root privilege escalation) via a symlink attack on `/etc/lighttpd/ssl/server.pem`.

Weakness classification

  • vulnerability@ncsc.ch: CWE-59

Primary references