CVE-2026-28775CWE-1188

Unauthenticated RCE via SNMP Default Writable Community String

Critical · published March 4, 2026

CVSS v4.0
10.0
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the `private` SNMP community string with read/write access by default. Because the SNMP agent runs as root, an unauthenticated remote attacker can utilize `NET-SNMP-EXTEND-MIB` directives, abusing the fact that the system runs a vulnerable version of net-snmp pre 5.8, to execute arbitrary operating system commands with root privileges.

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.01151 · 66.7th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2026-03-04T07:24Z
EPSS history
Timeline
  • 04 MAR 07:24Z
    Unauthenticated RCE via SNMP Default Writable Community String
    cvelistv5