Browsing Tag
CVE-2026-38057
1 post
Coverage of CVE-2026-38057, the iDirect iQ-Series CSRF vulnerability affecting state-changing satellite terminal API endpoints.
iDirect Satellite Terminal Flaws Put Link Management on the Patch List
CISA says ST Engineering iDirect iQ-Series satellite terminals running software 4.5.2.1 or earlier expose sensitive device identifiers and can be forced into reboots through weak API controls. Operators should treat the July 2 advisory as both a patch event and a management-plane exposure audit.
