Know What's Happening in Hardware

A Satellite Receiver Trusted by Pentagon, ESA Has More Than 20 Security Flaws — and the Maker Never Responded

A penetration tester uncovered more than 20 critical vulnerabilities in International Data Casting Corporation's SFX2100 satellite receiver, a device deployed by the U.S. Department of Defense, the European Space Agency and other critical infrastructure operators. The flaws include hard‑coded credentials, unauthenticated remote code execution via SNMP, FTP‑based binary replacement and OS command injection, resulting in 20 new CVEs (CVE‑2026‑28769 to CVE‑2026‑29128). The manufacturer ignored multiple disclosure attempts, leaving the devices unpatched. Researchers warned that the same codebase likely affects other IDC models, demanding immediate mitigation.