universal gateway firmware vulnerabilities and fixes

Recent CVEs affecting universal gateway firmware, with upgrade or downgrade steps. 11 tracked.

Also searched as: universalgatewayfirmware.

universal gateway firmware has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-06-03. Highest priority: CVE-2026-35075 (score 49/100).

• CVE-2026-35075 CRITICAL 9.8 UPGRADE An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus g
• CVE-2026-35082 HIGH 8.8 UPGRADE The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to in
• CVE-2026-35083 HIGH 8.8 UPGRADE A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.
• CVE-2026-35084 HIGH 8.8 UPGRADE A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full syst
• CVE-2026-35085 HIGH 8.8 UPGRADE A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full sy
• CVE-2026-35076 HIGH 8.1 UPGRADE The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to
• CVE-2026-35077 HIGH 8.1 UPGRADE The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due
• CVE-2026-35078 HIGH 8.1 UPGRADE The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to i
• CVE-2026-35079 HIGH 8.1 UPGRADE The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to in
• CVE-2026-35080 HIGH 8.1 UPGRADE The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due t
• CVE-2026-35081 HIGH 8.1 UPGRADE The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to i

FAQ

How do I fix universal gateway firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is universal gateway firmware being exploited right now?

None of the tracked universal gateway firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which universal gateway firmware CVE should I patch first?

CVE-2026-35075 currently ranks highest (49/100): An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus g.

RSS feed for universal gateway firmware · ← Back to latest CVEs