CVE-2026-28775 is a critical (CVSS 9.8) flaw in International Datacasting Corporation SFX Series SuperFlex satellite receivers. The device ships with a default read and write SNMP community, and its agent runs as root, so an unauthenticated attacker can run commands. No fix is confirmed, so restrict network access.
What's affected
The record names the IDC SFX Series SuperFlex SatelliteReceiver, including the SFX2100 and its firmware. It says the device runs a vulnerable version of net-snmp earlier than 5.8, and that the private community string is provisioned with read and write access by default.
The only reference in the record is a researcher's blog post, which says the vendor did not respond during disclosure. I found no vendor advisory or fixed firmware version, so treat the issue as unpatched until the vendor says otherwise.
How to check if you're exposed
Ask your network team whether any SFX receiver answers SNMP from networks beyond its management segment. Review the device's SNMP configuration for the default community. Do not test devices you do not own or run. Check the vendor for firmware notes for your model.
What to do now
- Find every IDC SFX receiver in your estate, including those at remote sites.
- Block SNMP (UDP 161) to the devices from everything except a dedicated management host.
- If the device allows it, replace the default community with a strong value and set the agent to read only where possible.
- Put management interfaces on an isolated network, and monitor for unexpected SNMP writes.
- Ask the vendor for fixed firmware and a support statement.
Why it matters
The record classes this as CWE-1188, insecure default initialization of a resource. Shipping a well-known community string with write access turns a management feature into an open door.
SNMP agents that allow extension directives can be told to run commands, and when the agent runs as root those commands run as root. That is the chain the record describes. It does not mark the CVE as exploited in the wild.
Devices like this are often installed once and forgotten in remote facilities, which makes network isolation the practical control.
Quick check
Does changing the community string fix it?
It removes the default credential, which helps a lot, but the record also points to an old net-snmp version. Limit network reach too, and ask the vendor for updated firmware.
Sources
Last reviewed: 19 October 2026.
