PatchTheCVEdatacast vulnerabilities
Recent CVEs affecting datacast products. 20 tracked.
datacast has 20 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-03-05. Highest priority: CVE-2026-28775 (score 65/100).
- CVE-2026-29128 CRITICAL 10.0 MITIGATE IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components
- CVE-2026-29127 HIGH 7.8 MITIGATE The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home d
- CVE-2026-29126 HIGH 7.8 MITIGATE Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Cast
- CVE-2026-29125 MEDIUM 4.7 MITIGATE IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowin
- CVE-2026-29124 HIGH 7.8 MITIGATE Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/moni
- CVE-2026-29123 HIGH 7.8 MITIGATE A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux
- CVE-2026-29122 MEDIUM 5.5 MITIGATE International Data Casting (IDC) SFX2100 satellite receiver comes with the `/bin/date` utility installed with
- CVE-2026-29121 HIGH 7.8 MITIGATE International Data Casting (IDC) SFX2100 satellite receiver comes with the `/sbin/ip` utility installed with t
- CVE-2026-29120 HIGH 7.8 MITIGATE The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation (IDC) SFX S
- CVE-2026-29119 CRITICAL 9.8 MITIGATE International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded
- CVE-2026-28778 CRITICAL 9.8 MITIGATE International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, har
- CVE-2026-28777 CRITICAL 9.8 MITIGATE International Datacasting Corporation (IDC) SFX2100 Satellite Receiver, trivial password for the `user` (usr
- CVE-2026-28776 CRITICAL 9.8 MITIGATE International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credenti
- CVE-2026-28775 CRITICAL 9.8 MITIGATE An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datac
- CVE-2026-28774 HIGH 8.8 MITIGATE An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International D
- CVE-2026-28773 HIGH 8.8 MITIGATE The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX
- CVE-2026-28772 MEDIUM 6.1 MITIGATE A Reflected Cross-Site Scripting (XSS) vulnerability in the /IDC_Logging/index.cgi endpoint of International D
- CVE-2026-28771 MEDIUM 6.1 MITIGATE A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Dataca
- CVE-2026-28770 HIGH 8.8 MITIGATE Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Dataca
- CVE-2026-28769 MEDIUM 6.5 MITIGATE A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting
FAQ
How do I fix datacast vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is datacast being exploited right now?
None of the tracked datacast CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which datacast CVE should I patch first?
CVE-2026-28775 currently ranks highest (65/100): An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datac.