CVE Program partner

Gridware

Gridware Cybersecurity

API
CVEs, 365 days4152 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationGridware Cybersecurity
RoleCNA
TypeResearcher
Reports toredhat → mitre
ScopeGridware software, services, and infrastructure issues, as well as vulnerabilities discovered by or reported to Gridware researchers that are not in another CNA’s scope.
Advisorieshttps://www.gridware.com.au/security-advisories/

Latest CVEs · RSS

  • CVE-2026-29128 2026-03-05 · CVSS 8.6
    IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owne
  • CVE-2026-29127 2026-03-05 · CVSS 9.2
    The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home directory. The directory is configured with permiss
  • CVE-2026-29126 2026-03-05 · CVSS 8.5
    Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Casting (IDC) SFX2100 Satellite Receiver allows a loca
  • CVE-2026-29125 2026-03-05 · CVSS 7.1
    IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network
  • CVE-2026-29124 2026-03-05 · CVSS 8.6
    Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/ID
  • CVE-2026-29123 2026-03-05 · CVSS 8.6
    A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially preform local
  • CVE-2026-29122 2026-03-05 · CVSS 8.3
    International Data Casting (IDC) SFX2100 satellite receiver comes with the `/bin/date` utility installed with the setuid bit set. This configuration grants elev
  • CVE-2026-29121 2026-03-05 · CVSS 8.3
    International Data Casting (IDC) SFX2100 satellite receiver comes with the `/sbin/ip` utility installed with the setuid bit set. This configuration grants eleva
  • CVE-2026-29120 2026-03-04 · CVSS 9.2
    The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation (IDC) SFX Series(SFX2100) SuperFlex Satellite Receiver insecu
  • CVE-2026-29119 2026-03-04 · CVSS 8.8
    International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account.
  • CVE-2026-28778 2026-03-04 · CVSS 7.9
    International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure credentials for the `xd` user acco
  • CVE-2026-28777 2026-03-04 · CVSS 9.2
    International Datacasting Corporation (IDC) SFX2100 Satellite Receiver, trivial password for the `user` (usr) account. A remote unauthenticated attacker can e
  • CVE-2026-28776 2026-03-04 · CVSS 7.8
    International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credentials for the `monitor` account. A remote unauthenti
  • CVE-2026-28775 2026-03-04 · CVSS 10.0
    An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex Sate
  • CVE-2026-28774 2026-03-04 · CVSS 9.3
    An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporation (IDC) SFX Series SuperFlex
  • CVE-2026-28773 2026-03-04 · CVSS 9.3
    The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite  Receiver Web Managemen
  • CVE-2026-28772 2026-03-04 · CVSS 5.1
    A Reflected Cross-Site Scripting (XSS) vulnerability in the /IDC_Logging/index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex
  • CVE-2026-28771 2026-03-04 · CVSS 5.1
    A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satel
  • CVE-2026-28770 2026-03-04 · CVSS 5.3
    Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satel
  • CVE-2026-28769 2026-03-04 · CVSS 5.3
    A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite R
  • CVE-2026-1953 2026-02-05 · CVSS 8.2
    Nukegraphic CMS v3.1.2 contains a stored cross-site scripting (XSS) vulnerability in the user profile edit functionality at /ngc-cms/user-edit-profile.php. The
  • CVE-2025-14202 2025-12-17 · CVSS 8.2
    A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG file with JavaScript content. When an aut
  • CVE-2025-66269 2025-11-26 · CVSS 7.1
    The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path int
  • CVE-2025-66266 2025-11-26 · CVSS 9.3
    The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the execut
  • CVE-2025-66265 2025-11-26 · CVSS 6.9
    CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attacker

All CVE Program partners