VYPR
High severityNVD Advisory· Published Jul 24, 2026· Updated Jul 27, 2026

CVE-2026-12502

CVE-2026-12502

Description

Improper Privilege Management (CWE-269) in /usr/bin/ltsudo in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to reset the password of any LARM user (including the larmapp service account) via the set-passwd subcommand.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.