https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:11:49.897524+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-28773 CVE-2026-28773 — Authenticated OS Command Injection via Ping Utility Leading to RCE as Root 2026-10-02T10:11:49.912916+00:00

Affected: International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface

The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite  Receiver Web Management Interface version 101 is vulnerable to OS Command Injection. The application insecurely parses the `IPaddr` parameter. An authenticated attacker can bypass server-side semicolon exclusion checks by using alternate shell metacharacters (such as the pipe `|` operator) to append and execute arbitrary shell commands with root privileges.