CVE-2026-35082

HIGH

Local file inclusion vulnerability and deletion in ugw-logread method

Title source: cna

Description

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.

References (1)

Core 1

Core References

https://www.certvde.com/en/advisories/VDE-2026-039/

Scores

CVSS v3 8.8

EPSS 0.0049

EPSS Percentile 38.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-22

Status published

Products (19)

MBS/Double-A Profibus V1_0_0_0 - V6_0_0_7

MBS/Double-A x-link V1_0_0_0 - V6_0_0_7

MBS/Double-X CAN V1_0_0_0 - V6_0_0_7

MBS/Double-X DALI V1_0_0_0 - V6_0_0_7

MBS/Double-X KNX V1_0_0_0 - V6_0_0_7

MBS/Double-X LON V1_0_0_0 - V6_0_0_7

MBS/Double-X M-Bus V1_0_0_0 - V6_0_0_7

MBS/Double-X PROFINET V1_0_0_0 - V6_0_0_7

MBS/Double-X x-link V1_0_0_0 - V6_0_0_7

MBS/Single-A V1_0_0_0 - V6_0_0_7

... and 9 more

Published Jun 03, 2026

Tracked Since Jun 03, 2026