ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2026-35078
8.1высокая

CVE-2026-35078

Описание

The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

Затрагиваемое ПО
Mbs-solutions Universal gateway firmwareMbs-solutions Double-a profibusMbs-solutions Double-a x-linkMbs-solutions Double-x canMbs-solutions Double-x daliMbs-solutions Double-x knxMbs-solutions Double-x lonMbs-solutions Double-x m-busMbs-solutions Double-x profinetMbs-solutions Double-x x-linkMbs-solutions Single-aMbs-solutions Single-xMbs-solutions Triple-x knx\+daliMbs-solutions Triple-x knx\+lonMbs-solutions Triple-x knx\+m-busMbs-solutions Triple-x profinet\+daliMbs-solutions Triple-x profinet\+knxMbs-solutions Triple-x profinet\+lonMbs-solutions Triple-x profinet\+m-bus
CVSS
Балл8.1 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Источники
https://www.certvde.com/en/advisories/VDE-2026-039/