CVE-2026-35083: Stack buffer overflow in method bac-deviceobject
A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the bac-deviceobject method or disable the service that exposes it, if feasible, until a vendor-supplied fix is available.
service or application exposing method bac-deviceobject bac-deviceobject (method) = disabled - Compensating control
Restrict network access to the service exposing bac-deviceobject using firewall rules, ACLs or network segmentation; allow only trusted management IPs and block access from untrusted networks.
- Operational
If exploitation is suspected, treat the host as fully compromised: isolate the system from the network, preserve forensic evidence (logs, memory, disk images), rebuild from known-good media, and rotate all credentials and keys that may have been exposed. Monitor systems for indicators of compromise.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35083?
The severity of CVE-2026-35083 is rated as high, with a score of 8.7.
How do I fix CVE-2026-35083?
To fix CVE-2026-35083, update the Mbs-solutions Universal Gateway Firmware to the latest version provided by the vendor.
What type of vulnerability is CVE-2026-35083?
CVE-2026-35083 is a stack buffer overflow vulnerability that can be exploited remotely.
Who is affected by CVE-2026-35083?
CVE-2026-35083 affects users of the Mbs-solutions Universal Gateway Firmware with user privileges.
What can an attacker achieve by exploiting CVE-2026-35083?
An attacker can gain full system access as root by exploiting the stack buffer overflow in CVE-2026-35083.