Triple-x Profinet+m-bus CVEs and Security Vulnerabilities

CVE-2026-35078

Arbitrary file delete vulnerability in method ugw-logstop

The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35079

Arbitrary file delete vulnerability in method ugw-restore

The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35080

Arbitrary file delete vulnerability in method ugw-restoreinfo

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35081

Arbitrary process termination vulnerability in method ugw-logstop

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35082

Local file inclusion vulnerability and deletion in ugw-logread method

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35084

Stack buffer overflow in method dali-devconfig

A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35085

Stack buffer overflow in method gdv-serverconfig

A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

Search vulnerabilities

Arbitrary file delete vulnerability in method ugw-logstop

Arbitrary file delete vulnerability in method ugw-restore

Arbitrary file delete vulnerability in method ugw-restoreinfo

Arbitrary process termination vulnerability in method ugw-logstop

Local file inclusion vulnerability and deletion in ugw-logread method

Stack buffer overflow in method dali-devconfig

Stack buffer overflow in method gdv-serverconfig