https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:06:09.255374+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-274551 EUVD-2026-274551 2026-10-02T09:06:09.290086+00:00 EUVD-2026-274551 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28773 fkie_cve-2026-28773 2026-10-02T09:06:09.290122+00:00

The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite  Receiver Web Management Interface version 101 is vulnerable to OS Command Injection. The application insecurely parses the `IPaddr` parameter. An authenticated attacker can bypass server-side semicolon exclusion checks by using alternate shell metacharacters (such as the pipe `|` operator) to append and execute arbitrary shell commands with root privileges.

 https://cve.radiocsirt.org/vuln/ghsa-c5hc-24j8-ggj4 GHSA-c5hc-24j8-ggj4 2026-10-02T09:06:09.290166+00:00

The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101 is vulnerable to OS Command Injection. The application insecurely parses the `IPaddr` parameter. An authenticated attacker can bypass server-side semicolon exclusion checks by using alternate shell metacharacters (such as the pipe `|` operator) to append and execute arbitrary shell commands with root privileges.