CVE-2026-55728

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.17 Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec L-VIS versions prior to 8.4.17 Loytec L-PAD versions prior to 8.4.17

Description A stack-based buffer overflow occurs in the /usr/bin/ltsudo endpoint within the cmd ipaddr conflict() function. An attacker with superadmin group privileges can exploit this by providing an overly long interface-name argument, which may lead to a SUID-root process abort or potential privilege escalation. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold.

Recommendations Update Loytec LIP-ME201C to version 8.4.17 or later. Update Loytec L-INX to version 8.4.17 or later. Update Loytec L-GATE to version 8.4.17 or later. Update Loytec L-ROC to version 8.4.17 or later. Update Loytec L-IOB to version 8.4.17 or later. Update Loytec L-DALI to version 8.4.17 or later. Update Loytec L-VIS to version 8.4.17 or later. Update Loytec L-PAD to version 8.4.17 or later.