International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 5, 2026 · NIST NVD

   Detected

   International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system. This allows an actor to be able to read any root read-only file

2. Jun 17, 2026 · NIST NVD

   Updated

   International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system. This allows an actor to be able to read any root read-only file

Affected

• cpe datacast/sfx2100 firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-29122

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-29122

  International Data Casting (IDC) SFX2100 satellite receiver comes with the utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to pref

  nvd.nist.gov

References

• Exploit · gtfobins.org
• Exploit · abdulmhsblog.com