What is CVE-2026-29123?

CVE-2026-29123 is a high-severity vulnerability in Datacast Sfx2100, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2026-03-05.

How severe is CVE-2026-29123?

High severity. CVSS v3 base score is 7.8 out of 10.

Privilege escalation in Datacast Sfx2100

CVE-2026-29123

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symlink abuse or shared object hijacking.

Vulnerability class: Privilege Escalation

EPSS: 0.001 (2.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Datacast Sfx2100
Datacast Sfx2100_firmware
International Datacasting Corporation Sfx2100 Satellite Receiver — versions SFX2100

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

b7efe717-a805-47cf-8e9a-921fca0ce0ce (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2026-29123?: CVE-2026-29123 is a high-severity vulnerability in Datacast Sfx2100, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2026-03-05.
How severe is CVE-2026-29123?: High severity. CVSS v3 base score is 7.8 out of 10.