Critical severity9.8NVD Advisory· Published Mar 4, 2026· Updated Jun 17, 2026
CVE-2026-28776
CVE-2026-28776
Description
International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credentials for the monitor account. A remote unauthenticated attacker can use these trivial, undocumented credentials to access the system via SSH. While initially dropped into a restricted shell, the attacker can trivially break out to achieve standard shell functionality.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*
- Range: SFX2100
Patches
Vulnerability mechanics
References
1- www.abdulmhsblog.com/posts/sfx2100-vulns/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.