← CVE Intelligence

CVE-2026-35080

Arbitrary file delete vulnerability in method ugw-restoreinfo PUBLISHED

Description (CNA)

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

Affected (CNA)

Vendor / product	Versions
MBS / Single-A	affected V1_00_00 before V6_00_07
MBS / Double-A Profibus	affected V1_00_00 before V6_00_07
MBS / Double-A x-link	affected V1_00_00 before V6_00_07
MBS / Single-X	affected V1_00_00 before V6_00_07
MBS / Double-X CAN	affected V1_00_00 before V6_00_07
MBS / Double-X DALI	affected V1_00_00 before V6_00_07
MBS / Double-X KNX	affected V1_00_00 before V6_00_07
MBS / Double-X LON	affected V1_00_00 before V6_00_07
MBS / Double-X M-Bus	affected V1_00_00 before V6_00_07
MBS / Double-X PROFINET	affected V1_00_00 before V6_00_07
MBS / Double-X x-link	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+DALI	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+LON	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+M-Bus	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+DALI	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+KNX	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+LON	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+M-Bus	affected V1_00_00 before V6_00_07

CWE

CWE-73

References

https://www.certvde.com/en/advisories/VDE-2026-039/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.