Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 19 products
CVE-2026-35080 Remote Arbitrary File Deletion in ugw-restoreinfo Method via Insufficient Input Validation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35080
Post summary
The entry announces CVE-2026-35080 as a remote arbitrary file deletion vulnerability due to insufficient input validation in the ugw-restoreinfo method, but offers no PoC, exploit, or mitigation details.
19 of 19 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | mbs-solutions | double-a_profibus | - | - | - |
| HW | mbs-solutions | double-a_x-link | - | - | - |
| HW | mbs-solutions | double-x_can | - | - | - |
| HW | mbs-solutions | double-x_dali | - | - | - |
| HW | mbs-solutions | double-x_knx | - | - | - |
| HW | mbs-solutions | double-x_lon | - | - | - |
| HW | mbs-solutions | double-x_m-bus | - | - | - |
| HW | mbs-solutions | double-x_profinet | - | - | - |
| HW | mbs-solutions | double-x_x-link | - | - | - |
| HW | mbs-solutions | single-a | - | - | - |
| HW | mbs-solutions | single-x | - | - | - |
| HW | mbs-solutions | triple-x_knx\+dali | - | - | - |
| HW | mbs-solutions | triple-x_knx\+lon | - | - | - |
| HW | mbs-solutions | triple-x_knx\+m-bus | - | - | - |
| HW | mbs-solutions | triple-x_profinet\+dali | - | - | - |
| HW | mbs-solutions | triple-x_profinet\+knx | - | - | - |
| HW | mbs-solutions | triple-x_profinet\+lon | - | - | - |
| HW | mbs-solutions | triple-x_profinet\+m-bus | - | - | - |
| OS | mbs-solutions | universal_gateway_firmware | - | - | - |