CVE-2026-28770Disclosure(datacast / sfx2100)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management Interface version 101 allows for XML Injection. The application reflects un-sanitized user input from the `file` parameter directly into a CDATA block, allowing an authenticated attacker to break out of the tags and inject arbitrary XML elements. An actor is confirmed to be able to turn this into an reflected XSS but further abuse such as XXE may be possible

datacast CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.abdulmhsblog.com/posts/sfx2100-vulns/

Weakness type (CWE)

CWE-91

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sfx2100
sfx2100_firmware

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 1d ago at 4 mentions (2026-03-04); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

datacast

Products

sfx2100sfx2100_firmware

1 version affected across 2 products

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

360.0%

General

240.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-04	4	Disclosure2General2
2026-03-05	1	Disclosure1

Full discourse5 posts

CVEarity@CVEarity218d
Disclosure
⚡ New CVE Alert: CVE-2026-28770 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28770 #CVE-2026-28770 #CVE #Medium #CyberSecurity #InfoSec https://t.co/Wyky0NqVV7
Post summary
A new CVE (CVE-2026-28770) with a medium severity of 5.3 affecting multiple unspecified products is announced, but no further technical, exploit, or patch details are provided.
0000046
65 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds220d
General
CVE-2026-28770 XML Injection Vulnerability in IDC SFX Series SuperFlex Satellite Receiver Web Interface https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28770
Post summary
The entry references CVE‑2026‑28770, describing an XML injection flaw in the IDC SFX Series SuperFlex Satellite Receiver Web Interface, but provides no evidence of exploitation, PoC, or patch availability.
0000035
4.0K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash220d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28770 - IDC SFX Series SuperFlex Satellite Receiver XML Injection Vulnerability Intel Report: https://ift.tt/2GyOzl4
Post summary
An alert announces the discovery of CVE-2026-28770, an XML injection vulnerability affecting IDC SFX Series SuperFlex Satellite Receivers, and provides a link to an Intel report for further details.
0000031
344 followersView on X
Infoflowcloud@infoflowcloud220d
Disclosure
🚨*CVE* CVE-2026-28770 Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite R… https://www.cve.org/CVERecord?id=CVE-2026-28770 ----- Traducción: CVE-2026-28770 Neu… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑28770, describing an improper neutralization vulnerability in a CGI script, and links to the CVE record, but provides no further exploitation or mitigation details.
0000029
55 followersView on X
CVE@CVEnew220d
General
CVE-2026-28770 Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite R… https://www.cve.org/CVERecord?id=CVE-2026-28770
Post summary
The text references CVE-2026-28770, noting an improper neutralization issue in a CGI script, but provides no evidence of PoC, exploit, active use, patch, or debunking.
00000199
56.6K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	datacast	sfx2100	-	-	-
OS	datacast	sfx2100_firmware	-	-	-

Explore more

Back to dashboard datacast CVEs sfx2100 vulnerabilities

What researchers are saying

CVE-2026-28770

CVEarity@CVEarityDisclosure

A new CVE (CVE-2026-28770) with a medium severity of 5.3 affecting multiple unspecified products is announced, but no further technical, exploit, or patch details are provided.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The entry references CVE‑2026‑28770, describing an XML injection flaw in the IDC SFX Series SuperFlex Satellite Receiver Web Interface, but provides no evidence of exploitation, PoC, or patch availability.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

An alert announces the discovery of CVE-2026-28770, an XML injection vulnerability affecting IDC SFX Series SuperFlex Satellite Receivers, and provides a link to an Intel report for further details.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE‑2026‑28770, describing an improper neutralization vulnerability in a CGI script, and links to the CVE record, but provides no further exploitation or mitigation details.

CVE@CVEnewGeneral

The text references CVE-2026-28770, noting an improper neutralization issue in a CGI script, but provides no evidence of PoC, exploit, active use, patch, or debunking.