High severity · published Mar 5, 2026
CVE-2026-29127
Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home directory. The directory is configured with permissions 0777, granting read, write, and execute access to all local users on the system, which may cause local privilege escalation depending on conditions of the system due to the presence of highly privileged processes and binaries residing within the affected directory.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
SFX2100 Satellite Receiver · International Datacasting Corporation
SFX2100 · source: vendor
SF
Sfx2100 Firmware · Datacast
All versions, or not specified · source: NVD
Affected product
SS
SFX2100 Satellite Receiver
International Datacasting Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-29127
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-29127
Exploit
https://www.abdulmhsblog.com/posts/sfx2100-vulns/
More from SFX2100 Satellite Receiver
10.0
CVE-2026-29128
IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files
7.8
CVE-2026-29126
World-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE
7.8
CVE-2026-29124
Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation
7.8
CVE-2026-29123
Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation
7.8
CVE-2026-29121
`/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE