CVE-2026-28775 Unauthenticated RCE via SNMP Default Writable Community String
Unauthenticated attackers can execute arbitrary commands with root privileges on IDC SuperFlex Satellite Receivers due to default writable SNMP community strings.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-28775?
CVE-2026-28775 is a critical command injection vulnerability in International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver, published on 4 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the `private` SNMP community string with read/write access by default. Because the SNMP agent runs as root, an unauthenticated remote attacker can utilize `NET-SNMP-EXTEND-MIB` directives, abusing the fact that the system runs a vulnerable version of net-snmp pre 5.8, to execute arbitrary operating system commands with root privileges.
Weakness: CWE-1188
Which versions are affected by CVE-2026-28775?
It affects 1 product.
Products include Datacast Sfx2100 Firmware.
How do I fix CVE-2026-28775?
No fix has been published for CVE-2026-28775 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-28775 being exploited?
There is no known exploitation of CVE-2026-28775 in the wild and no public exploit code.
Other vulnerabilities in International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver
- CVE-2026-28773 Authenticated OS Command Injection via Ping Utility Leading to RCE as Root
- CVE-2026-28774 Authenticated OS Command Injection via Traceroute Utility leads to Root RCE
- CVE-2026-29127 Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100
- CVE-2026-28777 Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver
- CVE-2026-29120 Insecure, Hardcoded Root Password Stored in Anaconda Configuration File On IDC SFX2100 Satellite Receiver
Sources
Also known as GHSA-rvxp-rc2j-v2h6.