St Engineering Idirect - Evolution Iq‑series Terminals - CRITICAL - CVE-2026-38056. A local privilege escalation vulnerability has been discovered in the iDirect iQ200 VSAT terminal, specifically affecting the firmware version 23.0.1.0. The iQ200 serves as a critical communications link, particularly in sectors such as oil and gas, maritime, and remote operations. The device is shipped with a default low-privilege local user account, designed for field technicians needing shell access for maintenance and diagnostics. However, this built-in account can be exploited to gain unauthorized administrative control over the device, posing serious risks to the integrity of communications in sensitive operations. No additional credentials are required for exploitation, making the vulnerability particularly concerning for operators relying on this essential technology.