Critical severity · published Mar 4, 2026
CVE-2026-28775
Unauthenticated RCE via SNMP Default Writable Community String
9.8
CVSS
1.2%
EPSS
No
On KEV
Description
An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the `private` SNMP community string with read/write access by default. Because the SNMP agent runs as root, an unauthenticated remote attacker can utilize `NET-SNMP-EXTEND-MIB` directives, abusing the fact that the system runs a vulnerable version of net-snmp pre 5.8, to execute arbitrary operating system commands with root privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
SFX2100 Series SuperFlex SatelliteReceiver · International Datacasting Corporation (IDC)
SFX2100 · source: vendor
SF
Sfx2100 Firmware · Datacast
All versions, or not specified · source: NVD
Affected product
SS
SFX2100 Series SuperFlex SatelliteReceiver
International Datacasting Corporation (IDC)
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-28775
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-28775
Exploit
https://www.abdulmhsblog.com/posts/sfx2100-vulns/
More from SFX2100 Series SuperFlex SatelliteReceiver
9.8
CVE-2026-29119
Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver