CVE-2026-29123

High · 7.8

CVSS

7.8

EPSS

0.1%

Published

Mar 5, 2026

CISA due date

—

The record

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local actor to potentially preform local privilege escalation depending on conditions of the system via execution of the affected SUID binary. This can be via PATH hijacking, symlink abuse or shared object hijacking.

Affected packages

Ecosystem	Package	Introduced	Fixed