International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 5, 2026 · NIST NVD

   Detected

   International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system and may potentially lead to other avenues for preforming privile

2. Jun 17, 2026 · NIST NVD

   Updated

   International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system and may potentially lead to other avenues for preforming privile

Affected

• cpe datacast/sfx2100 firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-29121

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-29121

  International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to prefo

  nvd.nist.gov

References

• Exploit · gtfobins.org
• Exploit · abdulmhsblog.com