CVE-2026-12503

Name of the Vulnerable Software and Affected Versions Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec L-VIS versions prior to 8.4.17 Loytec L-PAD versions prior to 8.4.17

Description Improper Link Resolution in the /usr/bin/larm starter executable on LINX-A64 allows an authenticated attacker with larmapp privileges to perform a symlink attack on /etc/lighttpd/ssl/server.pem. This action can make the /etc/passwd file writable by the larmapp group, potentially leading to root privilege escalation.

Recommendations Update Loytec L-INX to version 8.4.17 or later. Update Loytec L-GATE to version 8.4.17 or later. Update Loytec L-ROC to version 8.4.17 or later. Update Loytec L-IOB to version 8.4.17 or later. Update Loytec L-DALI to version 8.4.17 or later. Update Loytec L-VIS to version 8.4.17 or later. Update Loytec L-PAD to version 8.4.17 or later.