Quick answers
- Is CVE-2026-35080 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-35080 being exploited in the wild.
- How severe is CVE-2026-35080?
- High severity, with a CVSS score of 8.1, published 3 June 2026.
- Which products and versions are affected?
- MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7.
- Is there a fix for CVE-2026-35080?
- A patch was published on 2026-06-03: Fixed in firmware version V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-35080 attacked?
- It is attacked over the network, in device firmware.
- Am I affected by CVE-2026-35080?
- Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An arbitrary file deletion vulnerability exists in the MBS Universal Gateway (UGW) web GUI. The flaw is located within the 'ugw-restoreinfo' CGI method, which fails to properly validate user-controlled input used in file path operations (CWE-73). A remote attacker with authenticated user privileges can exploit this by sending crafted requests to delete arbitrary local files on the filesystem. This can lead to a denial of service or loss of system integrity. The vulnerability is addressed in firmware version V6_0_0_7.
Affected products
- MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7
Timeline
- 2026-06-03: disclosed
- 2026-06-03: advisory
- 2026-06-03: patched: Fixed in firmware version V6_0_0_7