---
id: 3158
title: "[CVE-2026-28769] 20+ vulnerabilities found in satellite receiver used by US DoD, EU's Space Agency and others"
cve: CVE-2026-28769
source_domain: abdulmhsblog.com
source_url: "http://abdulmhsblog.com/posts/sfx2100-vulns/"
published_at: "2026-03-05 00:00"
tags: ["rce", "pentesting", "vulnerability-research", "active-directory", "cve", "critical-infrastructure", "command-injection", "iot-security", "satellite-receiver", "full-disclosure", "hardcoded-credentials"]
phying_url: "https://phying.com/item/3158"
lang: en
---

# [CVE-2026-28769] 20+ vulnerabilities found in satellite receiver used by US DoD, EU's Space Agency and others

## Summary

20+ CVEs in the IDC SFX2100 satellite receiver used by the US DoD and ESA: command injection, SNMP RCE, hardcoded credentials and path traversal, disclosed after the vendor never responded.

## Intelligence Metadata

- **Sources:** abdulmhsblog.com
- **CVE:** CVE-2026-28769
- **Published:** 2026-03-05 00:00
- **Original:** http://abdulmhsblog.com/posts/sfx2100-vulns/
- **Phying News:** https://phying.com/item/3158