CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java. It may be remotely exploitable.
CVE
CVE-2026-28771
Severity
MEDIUM
CVSS
6.1
EPSS
0.21%
Java
Original NVD Description
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interface version 101. The application fails to adequately sanitize user-supplied input provided via the `cat` parameter before reflecting it in the HTTP response, allowing a remote attacker to execute arbitrary HTML or JavaScript in the victim's browser context.
Related CVEs
Other vulnerabilities affecting the same vendor(s)