CVE-2026-35078: Arbitrary file delete vulnerability in method ugw-logstop
The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the ugw-logstop method until a vendor-provided fix is available to prevent remote users from triggering arbitrary local file deletion.
ugw-logstop method enabled = false - Compensating control
Restrict access to the interface or service exposing ugw-logstop (e.g., via firewall, network ACLs, or management interface access controls) to only trusted IPs and administrative hosts; ensure user accounts have least privilege.
- Operational
Inspect system logs and file system for evidence of unexpected or unauthorized file deletions and restore affected files from backups if necessary.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35078?
The severity of CVE-2026-35078 is rated high with a score of 7.2.
What type of vulnerability is CVE-2026-35078?
CVE-2026-35078 is an arbitrary file delete vulnerability in the ugw-logstop method.
How do I fix CVE-2026-35078?
To fix CVE-2026-35078, ensure proper validation of user-controlled input in the ugw-logstop method.
Who is affected by CVE-2026-35078?
Users of Mbs-solutions Universal Gateway Firmware are affected by CVE-2026-35078.
What can attackers do with CVE-2026-35078?
Attackers can remotely delete arbitrary local files if they have user privileges due to insufficient input validation.