Cyber Resilience

CVE-2026-35083

HighUpdated

Published: 03 June 2026

Published
03 June 2026
Modified
17 June 2026
KEV Added
Patch
CVSS Score v4 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0046 36.4th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2026-35083 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Mbs-Solutions Universal Gateway Firmware. Its CVSS base score is 8.7 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 36.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Stack buffer overflow exploited remotely by authenticated user directly enables local privilege escalation to root via code execution.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-35085Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35084Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35079Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35080Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35075Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35077Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35081Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35076Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35078Same product: Mbs-Solutions Double-A Profibus
CVE-2026-35082Same product: Mbs-Solutions Double-A Profibus

Affected Assets

mbs-solutions
universal gateway firmware
≤ 6_00_07

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References