← CVE Intelligence

CVE-2026-35083

Stack buffer overflow in method bac-deviceobject PUBLISHED

Description (CNA)

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.

Affected (CNA)

Vendor / product	Versions
MBS / Single-A	affected V1_00_00 before V6_00_07
MBS / Double-A Profibus	affected V1_00_00 before V6_00_07
MBS / Double-A x-link	affected V1_00_00 before V6_00_07
MBS / Single-X	affected V1_00_00 before V6_00_07
MBS / Double-X CAN	affected V1_00_00 before V6_00_07
MBS / Double-X DALI	affected V1_00_00 before V6_00_07
MBS / Double-X KNX	affected V1_00_00 before V6_00_07
MBS / Double-X LON	affected V1_00_00 before V6_00_07
MBS / Double-X M-Bus	affected V1_00_00 before V6_00_07
MBS / Double-X PROFINET	affected V1_00_00 before V6_00_07
MBS / Double-X x-link	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+DALI	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+LON	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+M-Bus	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+DALI	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+KNX	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+LON	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+M-Bus	affected V1_00_00 before V6_00_07

CWE

CWE-121

References

https://www.certvde.com/en/advisories/VDE-2026-039/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.