https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 05:37:49 +0000 https://cve.radiocsirt.org/vuln/cve-2026-28778 <p><strong>Affected:</strong> International Datacasting Corporation (IDC) IDC SFX2100 SuperFlex Satellite Receiver</p> <p>International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the `xd` user account. A remote unauthenticated attacker can log in via FTP using these credentials. Because the `xd` user has write permissions to their home directory where root-executed binaries and symlinks (such as those invoked by `xdstartstop`) are stored, the attacker can overwrite these files or manipulate symlinks to achieve arbitrary code execution as the root user.</p> <p><strong>Affected:</strong> International Datacasting Corporation (IDC) IDC SFX2100 SuperFlex Satellite Receiver</p> <p>International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the `xd` user account. A remote unauthenticated attacker can log in via FTP using these credentials. Because the `xd` user has write permissions to their home directory where root-executed binaries and symlinks (such as those invoked by `xdstartstop`) are stored, the attacker can overwrite these files or manipulate symlinks to achieve arbitrary code execution as the root user.</p> https://cve.radiocsirt.org/vuln/cve-2026-28778