CVE-2026-35084: high-severity vulnerability in MBS Double-A Profibus
Stack buffer overflow in method dali-devconfig
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in the dali-devconfig tool allows someone with user access to overflow a memory buffer on the system stack, potentially taking complete control of the computer as the administrator (root). This is dangerous because it bypasses normal security restrictions.
Stack buffer overflow in dali-devconfig method CWE-121 allows authenticated local attackers to overwrite stack memory, potentially achieving arbitrary code execution with root privileges. The vulnerability requires user-level access; successful exploitation can lead to complete system compromise through stack frame corruption and return address manipulation.
In the same product, most dangerous first.