CVE-2026-28772mediumCWE-79

CVE-2026-28772: falha de média gravidade em International Datacasting Corporation (IDC)…

Reflected XSS in IDC_Logging Index endpoint

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SFX Series SuperFlex SatelliteReceiver Web Management Interface

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.1epss 0.2%
A Reflected Cross-Site Scripting (XSS) vulnerability in the /IDC_Logging/index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101 allows a remote attacker to execute arbitrary web scripts or HTML. The vulnerability is triggered by sending a crafted payload through the `submitType` parameter, which is reflected directly into the DOM without proper escaping.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Produtos afetados
International Datacasting Corporation (IDC) · SFX Series SuperFlex SatelliteReceiver Web Management Interface
CVEs relacionadas — International Datacasting Corporation (IDC)…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-28774CRITICALAuthenticated OS Command Injection via Traceroute Utility leads to Root RCEEPSS 2.8%CVE-2026-28773CRITICALAuthenticated OS Command Injection via Ping Utility Leading to RCE as RootEPSS 2.4%