Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the `xd` user account. A remote unauthenticated attacker can log in via FTP using these credentials. Because the `xd` user has write permissions to their home directory where root-executed binaries and symlinks (such as those invoked by `xdstartstop`) are stored, the attacker can overwrite these files or manipulate symlinks to achieve arbitrary code execution as the root user.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-04 | 4 | Disclosure3General1 |
| 2026-03-05 | 1 | Disclosure1 |
CVE-2026-28778 Unauthenticated Root Code Execution in IDC SFX Series Satellite Receiver via FTP https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28778
Post summary
A new CVE (CVE-2026-28778) reports unauthenticated root code execution via FTP on IDC SFX Series Satellite Receivers, with no PoC, exploit, or patch details provided.
⚡ New CVE Alert: CVE-2026-28778 📊 Severity: 7.9 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28778 #CVE-2026-28778 #CVE #High #CyberSecurity #InfoSec https://t.co/lHWTCaoX38
Post summary
A tweet announces CVE-2026-28778 with a high severity rating but lacks any technical details, patch information, or evidence of active exploitation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28778 Intel Report: https://ift.tt/IUagotb
Post summary
An alert referencing CVE-2026-28778 with a link to an Intel report, but no further details or actionable information are provided.
🚨*CVE* CVE-2026-28778 International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the `xd` user account. A… https://www.cve.org/CVERecord?id=CVE-2026-28778 ----- Traducción: CVE-2026-28778 Int… http://infoflow.cloud`
Post summary
The post announces CVE-2026-28778, highlighting hardcoded credentials in an IDC satellite receiver, but offers no PoC, exploit, or patch information.
CVE-2026-28778 International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the `xd` user account. A… https://www.cve.org/CVERecord?id=CVE-2026-28778
Post summary
The CVE discloses that the IDC SFX Series SuperFlex Satellite Receiver has hardcoded insecure credentials for the `xd` user, indicating a potential authentication flaw.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | datacast | sfx2100 | - | - | - |
| OS | datacast | sfx2100_firmware | - | - | - |