CVE-2026-35084: Stack buffer overflow in method dali-devconfig
Published Jun 3, 2026
·Updated
A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.
Affected Software
20 affected components
dali-devconfig
All of the following
Mbs-solutions Universal Gateway Firmware<6_00_07
Any of the following
Mbs-solutions Double-a Profibus
Mbs-solutions Double-a X-link
Mbs-solutions Double-x Can
Mbs-solutions Double-x Dali
Mbs-solutions Double-x Knx
Mbs-solutions Double-x Lon
Mbs-solutions Double-x M-bus
Mbs-solutions Double-x Profinet
Mbs-solutions Double-x X-link
Mbs-solutions Single-a
Mbs-solutions Single-x
Mbs-solutions Triple-x Knx\+dali
Mbs-solutions Triple-x Knx\+lon
Mbs-solutions Triple-x Knx\+m-bus
Mbs-solutions Triple-x Profinet\+dali
Mbs-solutions Triple-x Profinet\+knx
Mbs-solutions Triple-x Profinet\+lon
Mbs-solutions Triple-x Profinet\+m-bus
Event History
Jun 3, 2026
CVE Published
via MITRE·10:42 AM
Data Sourced
via MITRE·10:42 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-35084?
The severity of CVE-2026-35084 is high, with a score of 8.8.
2
How do I fix CVE-2026-35084?
To fix CVE-2026-35084, update to the latest version of dali-devconfig that addresses the buffer overflow vulnerability.
3
What type of vulnerability is CVE-2026-35084?
CVE-2026-35084 is classified as a stack buffer overflow vulnerability.
4
What impact does CVE-2026-35084 have?
CVE-2026-35084 allows a remote attacker with user privileges to gain full root access.
5
When was CVE-2026-35084 published?
CVE-2026-35084 was published on June 3, 2026.