SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-55728

LOW · CVSS 3.8 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-07-24 · Last synced 2026-08-23

CyberRota Analysis

AI-Generated

A stack-based buffer overflow vulnerability exists in the `cmd_ipaddr_conflict` function of the Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, and L-PAD products up to version 8.4.16, which can be exploited by an attacker in the superadmin group. This flaw allows for the potential elevation of privileges or a SUID-root process abort by providing an excessively long interface-name argument. Organizations using these affected products should prioritize addressing this vulnerability to mitigate risks associated with unauthorized access and privilege escalation.

CVE
CVE-2026-55728
Severity
LOW
CVSS
3.8
EPSS
0.11%

Original NVD Description

Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly long interface-name argument.