CVE-2026-29124 | THREATINT

Description

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting (IDC) SFX2100 Satellite Receiver, which may lead to local privlidge escalation from the `monitor` user to root

PUBLISHED Reserved 2026-03-04 | Published 2026-03-05 | Updated 2026-03-05 | Assigner Gridware

HIGH: 8.6CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Problem types

CWE-269 Improper Privilege Management

Product status

Default status

affected

SFX2100

affected

Credits

Abdul Mhanni finder

References

www.abdulmhsblog.com/posts/sfx2100-vulns/

cve.org (CVE-2026-29124)

nvd.nist.gov (CVE-2026-29124)

Download JSON