← CVE Intelligence

CVE-2026-35082

Local file inclusion vulnerability and deletion in ugw-logread method PUBLISHED

Description (CNA)

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.

Affected (CNA)

Vendor / product	Versions
MBS / Single-A	affected V1_00_00 before V6_00_07
MBS / Double-A Profibus	affected V1_00_00 before V6_00_07
MBS / Double-A x-link	affected V1_00_00 before V6_00_07
MBS / Single-X	affected V1_00_00 before V6_00_07
MBS / Double-X CAN	affected V1_00_00 before V6_00_07
MBS / Double-X DALI	affected V1_00_00 before V6_00_07
MBS / Double-X KNX	affected V1_00_00 before V6_00_07
MBS / Double-X LON	affected V1_00_00 before V6_00_07
MBS / Double-X M-Bus	affected V1_00_00 before V6_00_07
MBS / Double-X PROFINET	affected V1_00_00 before V6_00_07
MBS / Double-X x-link	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+DALI	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+LON	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+M-Bus	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+DALI	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+KNX	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+LON	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+M-Bus	affected V1_00_00 before V6_00_07

CWE

CWE-22

References

https://www.certvde.com/en/advisories/VDE-2026-039/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.