Elevated Privileges in International Data Casting SFX2100 Satellite Receiver

CVE-2026-29122

What is CVE-2026-29122?

The International Data Casting SFX2100 satellite receiver includes a vulnerable installation of the /bin/date utility with the setuid bit enabled. This security misconfiguration allows any local user to execute the binary with elevated privileges, potentially enabling them to perform unauthorized file read operations as the root user. This includes access to sensitive files such as the /etc/shadow file and other critical configuration files that contain sensitive information.

References