Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interface version 101. The application fails to adequately sanitize user-supplied input provided via the `cat` parameter before reflecting it in the HTTP response, allowing a remote attacker to execute arbitrary HTML or JavaScript in the victim's browser context.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-04 | 3 | Disclosure3 |
| 2026-03-05 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-28771 📊 Severity: 5.1 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28771 #CVE-2026-28771 #CVE #Medium #CyberSecurity #InfoSec https://t.co/g4VADO6K3c
Post summary
A new CVE (CVE-2026-28771) with a medium severity of 5.1 affecting unspecified products has been announced, but no PoC, exploit, or patch details are provided.
CVE-2026-28771 Reflected Cross-Site Scripting in IDC SFX Series Satellite Receiv... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28771 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces CVE‑2026‑28771, a Reflected XSS vulnerability in IDC SFX Series Satellite Receiv, and directs readers to detailed information on Vulmon.
🚨*CVE* CVE-2026-28771 A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite R… https://www.cve.org/CVERecord?id=CVE-2026-28771 ----- Traducción: CVE-2026-28771 Exi… http://infoflow.cloud`
Post summary
The post announces CVE-2026-28771, a reflected XSS vulnerability in the /index.cgi endpoint of IDC SFX Series SuperFlex Satellite R, with no PoC, exploit, or patch details provided.
CVE-2026-28771 A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite R… https://www.cve.org/CVERecord?id=CVE-2026-28771
Post summary
The text announces a reflected XSS vulnerability in the /index.cgi endpoint of IDC SFX Series SuperFlex Satellite R, providing technical details but no PoC, exploit, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | datacast | sfx2100 | - | - | - |
| OS | datacast | sfx2100_firmware | - | - | - |