CVE-2026-35083: high-severity vulnerability in MBS Double-A Profibus
Stack buffer overflow in method bac-deviceobject
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in the bac-deviceobject method allows someone with user access to overflow a memory buffer on the stack, potentially taking complete control of the system as root. This is dangerous because it can lead to full system compromise.
A stack buffer overflow exists in the bac-deviceobject method (CWE-121) that can be triggered by a remote attacker with user-level privileges. Exploitation allows arbitrary code execution with root privileges, bypassing normal access controls and enabling complete system takeover.
In the same product, most dangerous first.