CVE-2026-29128

CVE-2026-29128 is a high-severity vulnerability affecting the IDC SFX2100 Satellite Receiver firmware. It stems from world-readable configuration files for routing components that contain hardcoded or plaintext root credentials. A remote attacker can leverage these exposed credentials to gain unauthorized access, establish a foothold on the receiver, or potentially escalate privileges locally, with a CVSS score of 8.6. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, indicating awareness.