CVE-2026-29123CWE-269

Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation

High · published March 5, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symlink abuse or shared object hijacking.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-03-05T01:18Z
EPSS history
Timeline
  • 05 MAR 01:18Z
    Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation
    cvelistv5