CVE-2026-35076: Arbitrary file delete vulnerability in method bac-scanresult
The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or unexpose the bac-scanresult method/endpoint until a vendor patch is available to prevent remote users from invoking it.
bac-scanresult method enabled = false - Compensating control
Restrict access to the service or endpoint exposing bac-scanresult to trusted networks and IPs (firewall/ACLs) and limit user privileges so that untrusted or low-privilege accounts cannot invoke the method.
- Operational
Check logs for any invocations of bac-scanresult, verify integrity of local files that could be deleted by this method, and restore affected files from backups if deletion is detected.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35076?
CVE-2026-35076 has a high severity rating of 7.2.
How can I fix CVE-2026-35076?
To fix CVE-2026-35076, ensure that proper validation of user input is implemented in the bac-scanresult method.
Who is affected by CVE-2026-35076?
CVE-2026-35076 affects users of the Mbs-solutions Universal Gateway Firmware with user privileges.
What type of vulnerability is CVE-2026-35076?
CVE-2026-35076 is an arbitrary file deletion vulnerability due to insufficient validation of user-controlled input.
Can an attacker exploit CVE-2026-35076 remotely?
Yes, a remote attacker with user privileges can exploit CVE-2026-35076 to delete arbitrary local files.