CVE-2026-28770— XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-28770
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web management Interface version 101 allows for XML Injection. The application reflects un-sanitized user input from the `file` parameter directly into a CDATA block, allowing an authenticated attacker to break out of the tags and inject arbitrary XML elements. An actor is confirmed to be able to turn this into an reflected XSS but further abuse such as XXE may be possible
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
XML注入(XPath盲注)
Source: NVD (National Vulnerability Database)
Vulnerability Title
International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface是美国International Datacasting公司的一个卫星接收设备的Web管理后台。 International Datacasting SFX Series SuperFlex Satellite Receiver Web management Interface 101版本存在安全漏洞，该漏洞源于对文件/IDC_
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| International Datacasting Corporation (IDC) | SFX Series SuperFlex Satellite Receiver Web management interface | 101 | - |
II. Public POCs for CVE-2026-28770
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-28770
请登录查看更多情报信息。
Same Patch Batch · International Datacasting Corporation (IDC) · 2026-03-04 · 11 CVEs total
| CVE-2026-28769 | LFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumerat | |
| CVE-2026-28772 | Reflected XSS in IDC_Logging Index endpoint | |
| CVE-2026-28774 | Authenticated OS Command Injection via Traceroute Utility leads to Root RCE | |
| CVE-2026-28771 | Reflected XSS In /index.cgi Endpoint On IDC Satellite Receiver Web Management Interface Ve | |
| CVE-2026-28773 | Authenticated OS Command Injection via Ping Utility Leading to RCE as Root | |
| CVE-2026-28775 | Unauthenticated RCE via SNMP Default Writable Community String | |
| CVE-2026-29119 | Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2 | |
| CVE-2026-28777 | Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 | |
| CVE-2026-28776 | Hardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Sa | |
| CVE-2026-28778 | Hardcoded FTP Credentials and LPE(via Insecure Permissions) for `xd` Local Account on IDC |
IV. Related Vulnerabilities
Same vendor: International Datacasting Corporation (IDC)
- CVE-2026-29119
Hardcoded and Insecure Credentials for "Admin" Account provi - CVE-2026-28778
Hardcoded FTP Credentials and LPE(via Insecure Permissions) - CVE-2026-28777
Hardcoded and Insecure Credentials for "User" Local Account - CVE-2026-28776
Hardcoded and Insecure Credentials for "monitor" account wit - CVE-2026-28775
Unauthenticated RCE via SNMP Default Writable Community Stri
Same weakness: CWE-91
- CVE-2026-41650
fast-xml-parser XMLBuilder: XML Comment and CDATA Injection - CVE-2026-41675
xmldom: XML node injection through unvalidated processing in - CVE-2026-41674
xmldom: XML injection through unvalidated DocumentType seria - CVE-2026-41672
xmldom: XML node injection through unvalidated comment seria - CVE-2026-27693
traccar allows XML injection in KML and GPX exports
V. Comments for CVE-2026-28770
No comments yet