VulnSocial

CVE-2026-35082Disclosure(mbs-solutions / double-a_profibus)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mbs-solutions double-a_profibus systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.

mbs-solutions CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • double-a_profibus
  • double-a_x-link
  • double-x_can
  • double-x_dali

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-06-03); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
mbs-solutions
Products
double-a_profibusdouble-a_x-linkdouble-x_candouble-x_dalidouble-x_knxdouble-x_londouble-x_m-busdouble-x_profinetdouble-x_x-linksingle-a

1 version affected across 19 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-03: 1Mentions · 2026-06-04: 1Patch / Workaround · 2026-06-04: 1Technical Details · 2026-06-03: 1Technical Details · 2026-06-04: 106-0306-04
Signal classification1 categories
Disclosure
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • White Rabbitx 🏴‍☠️@TheRabbitPy
    Disclosure

    24 HIGH-severity CVEs dropped today. Key ones to watch: 🔥 AI/ML: CVE-2026-5241: huggingface/transformers ... RCE via trust_remote_code bypass when loading LightGlue models (even with trust_remote_code=False) 💥 Buffer Overflow → Root: CVE-2026-35085/84/83: gdv-serverconfig, dali-devconfig ... stack overflow → full root CVE-2022-49042/036: Synology ... local RCE via MinGW DLL & OpenSSL config 📁 Arbitrary File Ops (user → root): CVE-2026-35082/80/79/78/77/76: ugw-* & bac-scanresult ... read/terminate/delete arbitrary files & processes 🌐 Web/App: CVE-2025-15655: Mojoomla ... SQL injection CVE-2025-15654: Fox-themes Prague ... Reflected XSS CVE-2025-14772/73: ABB T-MAC Plus ... auth bypass + XSS 🔧 PrivEsc: CVE-2025-41259: SWUpdate ... TOCTOU → root CVE-2025-15656: Mojoomla ... privilege escalation 📡 Network: CVE-2026-37460: FRRouting ... crafted BGP UPDATE → DoS Patch priority: AI infra, Synology backups, ugw devices, SWUpdate, Mojoomla, ABB T-MAC.

    Post summary

    A concise advisory announcing 24 high‑severity CVEs released today, outlining the types of vulnerabilities and a patch priority list for affected infrastructures.

    11000129
    1.3K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-35082 Remote Arbitrary File Access in ugw-logread via Insufficient Input Validation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35082

    Post summary

    The post announces CVE-2026-35082, describing a remote arbitrary file access flaw in ugw-logread due to insufficient input validation, with no further details on exploits, patches, or usage.

    0000067
    4.0K followersView on X
CPE platform detail19 entries

19 of 19 entries

PartVendorProductVersionTarget SWTarget HW
HWmbs-solutionsdouble-a_profibus---
HWmbs-solutionsdouble-a_x-link---
HWmbs-solutionsdouble-x_can---
HWmbs-solutionsdouble-x_dali---
HWmbs-solutionsdouble-x_knx---
HWmbs-solutionsdouble-x_lon---
HWmbs-solutionsdouble-x_m-bus---
HWmbs-solutionsdouble-x_profinet---
HWmbs-solutionsdouble-x_x-link---
HWmbs-solutionssingle-a---
HWmbs-solutionssingle-x---
HWmbs-solutionstriple-x_knx\+dali---
HWmbs-solutionstriple-x_knx\+lon---
HWmbs-solutionstriple-x_knx\+m-bus---
HWmbs-solutionstriple-x_profinet\+dali---
HWmbs-solutionstriple-x_profinet\+knx---
HWmbs-solutionstriple-x_profinet\+lon---
HWmbs-solutionstriple-x_profinet\+m-bus---
OSmbs-solutionsuniversal_gateway_firmware---

Explore more

Back to dashboardmbs-solutions CVEsdouble-a_profibus vulnerabilities