CVE-2026-28776
Hardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Satellite Receiver
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credentials for the `monitor` account. A remote unauthenticated attacker can use these trivial, undocumented credentials to access the system via SSH. While initially dropped into a restricted shell, the attacker can trivially break out to achieve standard shell functionality.
| CWE | CWE-798 |
| Vendor | international datacasting corporation (idc) |
| Product | idc sfx2100 superflex satellite receiver |
| Published | Mar 4, 2026 |
| Last Updated | Mar 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for international datacasting corporation (idc) idc sfx2100 superflex satellite receiver
Be the first to know when new unknown vulnerabilities affecting international datacasting corporation (idc) idc sfx2100 superflex satellite receiver are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
International Datacasting Corporation (IDC) / IDC SFX2100 SuperFlex Satellite Receiver
SFX2100
References
Credits
Abdul Mhanni