CVE-2026-29122

Name of the Vulnerable Software and Affected Versions IDC SFX2100 satellite receiver (affected versions not specified)

Description The IDC SFX2100 satellite receiver includes the /bin/date utility installed with the setuid bit set. This configuration allows any local user who can execute the binary to gain elevated privileges. A local actor can leverage the GTFObins resource to perform privileged file reads as the root user on the local file system. This enables an attacker to read root-owned, read-only files, such as the /etc/shadow file or other configuration and secrets files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.