CVE-2026-35079: Arbitrary file delete vulnerability in method ugw-restore

Published Jun 3, 2026
·
Updated

The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

Affected Software

19 affected components
All of the following
Mbs-solutions Universal Gateway Firmware<6_00_07
Any of the following
Mbs-solutions Double-a Profibus
Mbs-solutions Double-a X-link
Mbs-solutions Double-x Can
Mbs-solutions Double-x Dali
Mbs-solutions Double-x Knx
Mbs-solutions Double-x Lon
Mbs-solutions Double-x M-bus
Mbs-solutions Double-x Profinet
Mbs-solutions Double-x X-link
Mbs-solutions Single-a
Mbs-solutions Single-x
Mbs-solutions Triple-x Knx\+dali
Mbs-solutions Triple-x Knx\+lon
Mbs-solutions Triple-x Knx\+m-bus
Mbs-solutions Triple-x Profinet\+dali
Mbs-solutions Triple-x Profinet\+knx
Mbs-solutions Triple-x Profinet\+lon
Mbs-solutions Triple-x Profinet\+m-bus

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Configuration

    Disable the ugw-restore method if it is not required to prevent remote users from invoking it to delete local files.

    ugw-restore enabled = false
  2. Configuration

    Ensure the ugw-restore method performs strict server-side validation and sanitization of all user-controlled input (for example, disallow path traversal and restrict allowed file paths) before performing any file operations.

    ugw-restore input_validation = enabled
  3. Compensating control

    Restrict access to the ugw-restore functionality: limit which user accounts have the privilege to invoke it and block access to the management/restore endpoint from untrusted networks using firewall rules or ACLs (allow only trusted administrative IPs).

  4. Operational

    Investigate systems for unauthorized or unexpected file deletions, restore affected files from backups as needed, review logs to determine if exploitation occurred, and rotate credentials if compromise is suspected.

Event History

Jun 3, 2026
CVE Published
via MITRE·10:39 AM
Data Sourced
via MITRE·10:39 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-35079?

CVE-2026-35079 has a severity rating of 7.2, indicating high risk.

2

What does CVE-2026-35079 allow an attacker to do?

CVE-2026-35079 allows a remote attacker with user privileges to delete arbitrary local files on the affected system.

3

How do I fix CVE-2026-35079?

To fix CVE-2026-35079, ensure proper validation of user input in the ugw-restore method to prevent unauthorized file deletions.

4

Which software is affected by CVE-2026-35079?

CVE-2026-35079 affects the Mbs-solutions Universal Gateway Firmware.

5

When was CVE-2026-35079 published?

CVE-2026-35079 was published on June 3, 2026.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203