CVE-2023-36624: Loxone Miniserver Go Gen 2 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement.

Affected products

• Loxone Miniserver Go Gen 2 Firmware: up to and including 14.0.3.28

Published 2023-07-05. Last modified 2026-06-17.