CVE-2026-28775: critical vulnerability in International Datacasting Corporation (IDC)…
Unauthenticated RCE via SNMP Default Writable Community String
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A satellite receiver device comes with a default SNMP password that allows anyone on the network to run commands as the administrator. An attacker can exploit this to take complete control of the device without needing any credentials.
An unauthenticated remote attacker can exploit a default writable SNMP community string ('private') on IDC SFX Series SuperFlex devices running vulnerable net-snmp versions prior to 5.8. By abusing NET-SNMP-EXTEND-MIB directives, the attacker can execute arbitrary OS commands with root privileges, as the SNMP agent runs with elevated permissions. No authentication or special conditions are required; network access to the SNMP service is sufficient.
In the same product, most dangerous first.