Is CVE-2026-35079 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-35079 being exploited in the wild.

How severe is CVE-2026-35079?

High severity, with a CVSS score of 8.1, published 3 June 2026.

Which products and versions are affected?

MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7.

Is there a fix for CVE-2026-35079?

A patch was published on 2026-06-03: Fixed in firmware V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-35079 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-35079?

Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35079: MBS Universal Gateway arbitrary file deletion in ugw-restore

Q: Is there a fix for CVE-2026-35079?

A patch was published on 2026-06-03: Fixed in firmware V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-35079 attacked?

It is attacked over the network, in device firmware.

Q: Am I affected by CVE-2026-35079?

Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35079 · Severity: high · CVSS 8.1 · Published 2026-06-03

MBS Universal Gateways, which are used to connect different communication protocols in building automation systems, contain a vulnerability in their web management interface. An authenticated user can exploit this flaw to delete critical system files. This could lead to a complete loss of device configuration or cause the gateway to stop functioning, disrupting building operations.

Technologies: MBS GmbH Universal Gateway Firmware. Vendors: MBS GmbH.

Quick answers

Is CVE-2026-35079 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-35079 being exploited in the wild.
How severe is CVE-2026-35079?: High severity, with a CVSS score of 8.1, published 3 June 2026.
Which products and versions are affected?: MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7.
Is there a fix for CVE-2026-35079?: A patch was published on 2026-06-03: Fixed in firmware V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-35079 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-35079?: Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability classified as External Control of File Name or Path (CWE-73) exists in the ugw-restore CGI method of MBS Universal Gateway (UGW) firmware. The issue stems from insufficient validation of user-supplied input within the web GUI's settings management. A remote attacker with valid user-level credentials can provide malicious path information to delete arbitrary files on the local filesystem. This can result in a denial of service or the destruction of sensitive configuration data. The vulnerability is addressed in firmware version V6_0_0_7.

Affected products

MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7

Timeline

2026-06-03: disclosed
2026-06-03: advisory
2026-06-03: patched: Fixed in firmware V6_0_0_7

References

https://www.certvde.com/en/advisories/VDE-2026-039/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.