CVE-2026-35081highCWE-20

CVE-2026-35081: high-severity vulnerability in MBS Double-A Profibus

Arbitrary process termination vulnerability in method ugw-logstop

Published · Updated

Follow this CVE+ Monitor Double-A Profibus+ Monitor Double-A x-link

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.4%
In short

A flaw in the ugw-logstop method lets someone with basic user access stop any running process on the system by sending improper input. This could crash important services and disrupt how the system works.

Technical detail

The ugw-logstop method fails to validate user-supplied input before terminating processes, allowing an authenticated attacker to abuse the functionality to kill arbitrary processes. This requires user-level privileges and can result in denial of service or system instability by terminating critical services.

Summary generated and translated by AI from the official description.
The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
MBS · Double-A ProfibusMBS · Double-A x-linkMBS · Double-X CANMBS · Double-X DALIMBS · Double-X KNXMBS · Double-X LONMBS · Double-X M-BusMBS · Double-X PROFINETMBS · Double-X x-linkMBS · Single-AMBS · Single-XMBS · Triple-X KNX+DALIMBS · Triple-X KNX+LONMBS · Triple-X KNX+M-BusMBS · Triple-X PROFINET+DALIMBS · Triple-X PROFINET+KNXMBS · Triple-X PROFINET+LONMBS · Triple-X PROFINET+M-Bus
Related CVEs — MBS Double-A Profibus

In the same product, most dangerous first.

CVE-2026-35082HIGHLocal file inclusion vulnerability and deletion in ugw-logread methodEPSS 0.5%CVE-2026-35085HIGHStack buffer overflow in method gdv-serverconfigEPSS 0.5%CVE-2026-35075CRITICALHardcoded default Password for Service AccountEPSS 0.5%CVE-2026-35084HIGHStack buffer overflow in method dali-devconfigEPSS 0.5%CVE-2026-35083HIGHStack buffer overflow in method bac-deviceobjectEPSS 0.5%CVE-2026-35080HIGHArbitrary file delete vulnerability in method ugw-restoreinfoEPSS 0.4%