VulnSocial

CVE-2026-35085Disclosure(mbs-solutions / double-a_profibus)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mbs-solutions double-a_profibus systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.

mbs-solutions CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • double-a_profibus
  • double-a_x-link
  • double-x_can
  • double-x_dali

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-06-03); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
mbs-solutions
Products
double-a_profibusdouble-a_x-linkdouble-x_candouble-x_dalidouble-x_knxdouble-x_londouble-x_m-busdouble-x_profinetdouble-x_x-linksingle-a

1 version affected across 19 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-03: 2Mentions · 2026-06-04: 1Patch / Workaround · 2026-06-04: 1Technical Details · 2026-06-03: 1Technical Details · 2026-06-04: 106-0306-04
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-032
Disclosure1General1
2026-06-041
Patch1
Full discourse3 posts
  • White Rabbitx 🏴‍☠️@TheRabbitPy
    Patch

    24 HIGH-severity CVEs dropped today. Key ones to watch: 🔥 AI/ML: CVE-2026-5241: huggingface/transformers ... RCE via trust_remote_code bypass when loading LightGlue models (even with trust_remote_code=False) 💥 Buffer Overflow → Root: CVE-2026-35085/84/83: gdv-serverconfig, dali-devconfig ... stack overflow → full root CVE-2022-49042/036: Synology ... local RCE via MinGW DLL & OpenSSL config 📁 Arbitrary File Ops (user → root): CVE-2026-35082/80/79/78/77/76: ugw-* & bac-scanresult ... read/terminate/delete arbitrary files & processes 🌐 Web/App: CVE-2025-15655: Mojoomla ... SQL injection CVE-2025-15654: Fox-themes Prague ... Reflected XSS CVE-2025-14772/73: ABB T-MAC Plus ... auth bypass + XSS 🔧 PrivEsc: CVE-2025-41259: SWUpdate ... TOCTOU → root CVE-2025-15656: Mojoomla ... privilege escalation 📡 Network: CVE-2026-37460: FRRouting ... crafted BGP UPDATE → DoS Patch priority: AI infra, Synology backups, ugw devices, SWUpdate, Mojoomla, ABB T-MAC.

    Post summary

    The post lists 24 high‑severity CVEs with detailed technical descriptions and prioritizes patching for affected systems, focusing on remediation rather than proof‑of‑concept or active exploitation.

    11000129
    1.3K followersView on X
  • VulDB 🛡@vuldb
    General

    There is a new vulnerability with elevated criticality in MBS Single-A and other products (CVE-2026-35085) https://vuldb.com/vuln/368106

    Post summary

    The post merely announces CVE‑2026‑35085 with a link but provides no additional evidence of PoC, exploit code, active attacks, patch, or technical details.

    0000065
    2.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-35085 Remote Code Execution via Stack Buffer Overflow in gdv-serverconfig https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35085

    Post summary

    The message announces CVE‑2026‑35085 as a stack buffer‑overflow vulnerability in gdv‑serverconfig that allows remote code execution, but provides no PoC, exploit, patch, or active exploitation details.

    0000053
    4.0K followersView on X
CPE platform detail19 entries

19 of 19 entries

PartVendorProductVersionTarget SWTarget HW
HWmbs-solutionsdouble-a_profibus---
HWmbs-solutionsdouble-a_x-link---
HWmbs-solutionsdouble-x_can---
HWmbs-solutionsdouble-x_dali---
HWmbs-solutionsdouble-x_knx---
HWmbs-solutionsdouble-x_lon---
HWmbs-solutionsdouble-x_m-bus---
HWmbs-solutionsdouble-x_profinet---
HWmbs-solutionsdouble-x_x-link---
HWmbs-solutionssingle-a---
HWmbs-solutionssingle-x---
HWmbs-solutionstriple-x_knx\+dali---
HWmbs-solutionstriple-x_knx\+lon---
HWmbs-solutionstriple-x_knx\+m-bus---
HWmbs-solutionstriple-x_profinet\+dali---
HWmbs-solutionstriple-x_profinet\+knx---
HWmbs-solutionstriple-x_profinet\+lon---
HWmbs-solutionstriple-x_profinet\+m-bus---
OSmbs-solutionsuniversal_gateway_firmware---

Explore more

Back to dashboardmbs-solutions CVEsdouble-a_profibus vulnerabilities