CVE-2026-35076: high-severity vulnerability in MBS Double-A Profibus
Arbitrary file delete vulnerability in method bac-scanresult
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A feature called bac-scanresult allows someone with a user account to delete any file on the system because the code doesn't properly check what files the user is trying to delete. This is dangerous because an attacker could remove important system or application files.
The bac-scanresult method fails to validate user-controlled file path input, allowing authenticated attackers to delete arbitrary files via path traversal or direct file specification. Exploitation requires valid user credentials and can result in denial of service or compromise of system integrity through deletion of critical files.
In the same product, most dangerous first.