Is CVE-2026-29121 actively exploited?

No active exploitation of CVE-2026-29121 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-29121 be exploited remotely?

No. CVE-2026-29121 requires local access to exploit.

What is the CVSS score of CVE-2026-29121?

CVE-2026-29121 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2026-29121

HIGH

CVE-2026-29121

CWE-269Published: March 5, 2026· Updated: Mar 11, 2026

7.8

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:2.1th

Official Description

International Data Casting (IDC) SFX2100 satellite receiver comes with the `/sbin/ip` utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system and may potentially lead to other avenues for preforming privileged actions.

NVD Source

Technical Analysis

CVE-2026-29121 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.