PT-2026-22871 · International Datacasting · Sfx Series Superflex Satellitereceiver

Abdul Mhanni · Publicado 2026-03-04 · Atualizado 2026-03-05 · CVE-2026-28769

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management portal version 101

Description A path traversal issue exists in the /IDC Logging/checkifdone.cgi script. An authenticated attacker can manipulate the file parameter to access arbitrary files on the system. This is due to insecure file path handling within the perl script. The vulnerability allows directory traversal, and the system confirms file existence through backup operation status.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-28769

Produtos afetados

Sfx Series Superflex Satellitereceiver

Referências · 10

• 🔥 https://abdulmhsblog.com/posts/sfx2100-vulns · Exploit
• https://t.me/CVEtracker/46280 · Publicação no Telegram
• https://twitter.com/cyberbivash/status/2029112627373236678 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2029096606537056342 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2029177642637729804 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-28769 · Nota de Segurança
• https://abdulmhsblog.com/posts/spfx-vulnrabilities · Nota
• https://twitter.com/CVEarity/status/2029554610428584014 · Publicação no Twitter
• https://t.me/cveNotify/154078 · Publicação no Telegram
• https://t.me/cveNotify/154271 · Publicação no Telegram