CVE-2026-12502

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.17 Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec L-VIS versions prior to 8.4.17 Loytec L-PAD versions prior to 8.4.17

Description Improper privilege management in the /usr/bin/ltsudo binary allows an attacker with superadmin group permissions to reset the password of any LARM user, including the larmapp service account. This action is performed using the set-passwd subcommand.

Recommendations Update LIP-ME201C to version 8.4.17 or later. Update L-INX to version 8.4.17 or later. Update L-GATE to version 8.4.17 or later. Update L-ROC to version 8.4.17 or later. Update L-IOB to version 8.4.17 or later. Update L-DALI to version 8.4.17 or later. Update L-VIS to version 8.4.17 or later. Update L-PAD to version 8.4.17 or later.