PatchTheCVEmbs-solutions vulnerabilities
Recent CVEs affecting mbs-solutions products. 11 tracked.
mbs-solutions has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-06-03. Highest priority: CVE-2026-35075 (score 49/100).
- CVE-2026-35075 CRITICAL 9.8 UPGRADE An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus g
- CVE-2026-35082 HIGH 8.8 UPGRADE The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to in
- CVE-2026-35083 HIGH 8.8 UPGRADE A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.
- CVE-2026-35084 HIGH 8.8 UPGRADE A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full syst
- CVE-2026-35085 HIGH 8.8 UPGRADE A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full sy
- CVE-2026-35076 HIGH 8.1 UPGRADE The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to
- CVE-2026-35077 HIGH 8.1 UPGRADE The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due
- CVE-2026-35078 HIGH 8.1 UPGRADE The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to i
- CVE-2026-35079 HIGH 8.1 UPGRADE The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to in
- CVE-2026-35080 HIGH 8.1 UPGRADE The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due t
- CVE-2026-35081 HIGH 8.1 UPGRADE The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to i
FAQ
How do I fix mbs-solutions vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mbs-solutions being exploited right now?
None of the tracked mbs-solutions CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mbs-solutions CVE should I patch first?
CVE-2026-35075 currently ranks highest (49/100): An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus g.