High severity · published Mar 5, 2026
CVE-2026-29123
Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symlink abuse or shared object hijacking.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
SFX2100 Satellite Receiver · International Datacasting Corporation
SFX2100 · source: vendor
SF
Sfx2100 Firmware · Datacast
All versions, or not specified · source: NVD
Affected product
SS
SFX2100 Satellite Receiver
International Datacasting Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-29123
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-29123
Exploit
https://www.abdulmhsblog.com/posts/sfx2100-vulns/
More from SFX2100 Satellite Receiver
10.0
CVE-2026-29128
IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files
7.8
CVE-2026-29127
Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100
7.8
CVE-2026-29126
World-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE
7.8
CVE-2026-29124
Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation
7.8
CVE-2026-29121
`/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE