PT-2026-23128 · Idc · Idc Sfx2100

Abdul Mhanni · Published 2026-03-05 · Updated 2026-03-09 · CVE-2026-29127

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions IDC SFX2100 versions (affected versions not specified)

Description The IDC SFX2100 Satellite Receiver has overly permissive file system permissions set on the monitor user's home directory. The directory is configured with permissions 0777, granting read, write, and execute access to all local users on the system. This may lead to local privilege escalation depending on system conditions, due to the presence of highly privileged processes and binaries within the affected directory.

Recommendations Restrict file system permissions on the monitor user's home directory to a more secure configuration.

Exploit

Fix

LPE

Incorrect Authorization

Improper Privilege Management

Weakness Enumeration

CWE-863

CWE-269

Related Identifiers

CVE-2026-29127

Affected Products

Idc Sfx2100

References · 8

• 🔥 https://abdulmhsblog.com/posts/sfx2100-vulns · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-29127 · Security Note
• https://abdulmhsblog.com/posts/spfx-vulnrabilities · Note
• https://t.me/CVEtracker/46404 · Telegram Post
• https://twitter.com/cyberbivash/status/2029424843217682937 · Twitter Post
• https://t.me/cveNotify/154264 · Telegram Post
• https://t.me/cveNotify/154851 · Telegram Post
• https://twitter.com/CVEnew/status/2030755416892756459 · Twitter Post