Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.7 CVE-2026-35084

Stack buffer overflow in method dali-devconfig_CVE-2026-35084

A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.

MBS Single-A V1_0_0_0 CVE
HIGH 8.7 CVE-2026-35083

Stack buffer overflow in method bac-deviceobject_CVE-2026-35083

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.

MBS Single-A V1_0_0_0 CVE
HIGH 8.7 CVE-2026-35082

Local file inclusion vulnerability and deletion in ugw-logread method_CVE-2026-35082

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplie...

MBS MBS products including Single-A, Double-A, Single-X, Double-X, and Triple-X V1_0_0_0 CVE
HIGH 7.2 CVE-2026-35081

Arbitrary process termination vulnerability in method ugw-logstop_CVE-2026-35081

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-suppli...

MBS Single-A V1_0_0_0 CVE
HIGH 7.2 CVE-2026-35080

Arbitrary file delete vulnerability in method ugw-restoreinfo_CVE-2026-35080

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-con...

MBS Single-A V1_0_0_0 CVE
HIGH 7.2 CVE-2026-35079

Arbitrary file delete vulnerability in method ugw-restore_CVE-2026-35079

The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-control...

MBS Single-A V1_0_0_0 CVE
HIGH 7.2 CVE-2026-35078

Arbitrary file delete vulnerability in method ugw-logstop_CVE-2026-35078

The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-contro...

MBS Single-A V1_0_0_0 CVE
HIGH 7.2 CVE-2026-35077

Arbitrary file delete vulnerability in method ugw-delete-file_CVE-2026-35077

The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-co...

MBS Single-A V1_0_0_0 CVE
HIGH 7.2 CVE-2026-35076

Arbitrary file delete vulnerability in method bac-scanresult_CVE-2026-35076

The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-cont...

MBS Single-A V1_0_0_0 CVE
CRITICAL 9.3 CVE-2026-35075

Hardcoded default Password for Service Account_CVE-2026-35075

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

MBS Single-A V1_0_0_0 CVE