International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interface

• CVE-2026-28771 Medium 5.1 Reflected XSS In /index.cgi Endpoint On IDC Satellite Receiver Web Management Interface Version 101 0.2%
• CVE-2026-28770 Medium 5.3 XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101 0.4%
• CVE-2026-28769 Medium 5.3 LFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumeration On IDC Satellite Receiver Web Management Interface Version 101 0.7%