CVE-2026-29124 Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation

What is CVE-2026-29124?

CVE-2026-29124 is a high-severity vulnerability in International Datacasting Corporation SFX2100 Satellite Receiver, published on 5 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting (IDC) SFX2100 Satellite Receiver, which may lead to local privlidge escalation from the `monitor` user to root

Weakness: CWE-269

Which versions are affected by CVE-2026-29124?

It affects 1 product.

Products include Datacast Sfx2100 Firmware.

How do I fix CVE-2026-29124?

No fix has been published for CVE-2026-29124 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-29124 being exploited?

There is no known exploitation of CVE-2026-29124 in the wild and no public exploit code.

Other vulnerabilities in International Datacasting Corporation SFX2100 Satellite Receiver

• CVE-2026-28775 Unauthenticated RCE via SNMP Default Writable Community String Critical 10.0
• CVE-2026-28773 Authenticated OS Command Injection via Ping Utility Leading to RCE as Root Critical 9.3
• CVE-2026-28774 Authenticated OS Command Injection via Traceroute Utility leads to Root RCE Critical 9.3
• CVE-2026-29127 Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100 Critical 9.2
• CVE-2026-28777 Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver Critical 9.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8qw5-974f-hf78.