Triple-x Profinet\+lon CVEs and Security Vulnerabilities

CVE-2026-35075

Hardcoded default Password for Service Account

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double A Profibus Firmware Double A X Link Firmware Double X Can Firmware and 34 more

CVE-2026-35076

Arbitrary file delete vulnerability in method bac-scanresult

The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double A Profibus Firmware Double A X Link Firmware Double X Can Firmware and 34 more

CVE-2026-35077

Arbitrary file delete vulnerability in method ugw-delete-file

The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double A Profibus Firmware Double A X Link Firmware Double X Can Firmware and 34 more

CVE-2026-35078

Arbitrary file delete vulnerability in method ugw-logstop

The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35079

Arbitrary file delete vulnerability in method ugw-restore

The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35080

Arbitrary file delete vulnerability in method ugw-restoreinfo

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35081

Arbitrary process termination vulnerability in method ugw-logstop

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35082

Local file inclusion vulnerability and deletion in ugw-logread method

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35083

Stack buffer overflow in method bac-deviceobject

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double A Profibus Firmware Double A X Link Firmware Double X Can Firmware and 34 more

CVE-2026-35084

Stack buffer overflow in method dali-devconfig

A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

CVE-2026-35085

Stack buffer overflow in method gdv-serverconfig

A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Mbs Mbs-solutions

Products

Double-a Profibus Double-a X-link Double-x Can and 52 more

Search vulnerabilities

Hardcoded default Password for Service Account

Arbitrary file delete vulnerability in method bac-scanresult

Arbitrary file delete vulnerability in method ugw-delete-file

Arbitrary file delete vulnerability in method ugw-logstop

Arbitrary file delete vulnerability in method ugw-restore

Arbitrary file delete vulnerability in method ugw-restoreinfo

Arbitrary process termination vulnerability in method ugw-logstop

Local file inclusion vulnerability and deletion in ugw-logread method

Stack buffer overflow in method bac-deviceobject

Stack buffer overflow in method dali-devconfig

Stack buffer overflow in method gdv-serverconfig