CVE-2026-35077

HIGH

MBS Gateway Devices V1_0_0_0-V6_0_0_7 - ugw-delete-file Arbitrary File Deletion

Title source: manual

Description

The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

References (1)

Core 1

Core References

https://www.certvde.com/en/advisories/VDE-2026-039/

Scores

CVSS v3 8.1

EPSS 0.0037

EPSS Percentile 28.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-73

Status published

Products (19)

MBS/Double-A Profibus V1_0_0_0 - V6_0_0_7

MBS/Double-A x-link V1_0_0_0 - V6_0_0_7

MBS/Double-X CAN V1_0_0_0 - V6_0_0_7

MBS/Double-X DALI V1_0_0_0 - V6_0_0_7

MBS/Double-X KNX V1_0_0_0 - V6_0_0_7

MBS/Double-X LON V1_0_0_0 - V6_0_0_7

MBS/Double-X M-Bus V1_0_0_0 - V6_0_0_7

MBS/Double-X PROFINET V1_0_0_0 - V6_0_0_7

MBS/Double-X x-link V1_0_0_0 - V6_0_0_7

MBS/Single-A V1_0_0_0 - V6_0_0_7

... and 9 more

Published Jun 03, 2026

Tracked Since Jun 03, 2026