Unrated severityNVD Advisory· Published Jul 24, 2026· Updated Jul 24, 2026

Loytec LINX firmware: Improper Privilege Management in /usr/bin/ltsudo

CVE-2026-12502

Description

Improper Privilege Management (CWE-269) in /usr/bin/ltsudo in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to reset the password of any LARM user (including the larmapp service account) via the set-passwd subcommand.

Affected products

Loytec/LINX-151llm-fuzzy
Range: <=8.4.16
Loytec/LIP-ME201llm-fuzzy
Range: <=8.4.16

Patches

Vulnerability mechanics

References

www.loytec.com/support/product-security/advisories/8519-dibt-cve-20260526-0001-unrestricted-service-account-password-reset-highmitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000