Is CVE-2026-35081 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-35081 being exploited in the wild.

How severe is CVE-2026-35081?

High severity, with a CVSS score of 8.1, published 3 June 2026.

Which products and versions are affected?

MBS GmbH Universal Gateway A-Series Firmware < V6_0_0_7; MBS GmbH Universal Gateway X-Series Firmware < V6_0_0_7.

Is there a fix for CVE-2026-35081?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-35081 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-35081?

Check whether you run MBS GmbH Universal Gateway A-Series Firmware or MBS GmbH Universal Gateway X-Series Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35081: MBS Universal Gateway arbitrary process termination in ugw-logstop

Q: Is there a fix for CVE-2026-35081?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-35081 attacked?

It is attacked over the network, in device firmware.

Q: Am I affected by CVE-2026-35081?

Check whether you run MBS GmbH Universal Gateway A-Series Firmware or MBS GmbH Universal Gateway X-Series Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35081 · Severity: high · CVSS 8.1 · Published 2026-06-03

MBS Universal Gateways, which are used to connect different communication protocols in building automation systems, contain a vulnerability in their web management interface. An attacker with basic user credentials can exploit this flaw to shut down critical system processes. This could lead to a loss of control over building automation systems, resulting in operational downtime or a denial of service for connected infrastructure.

Technologies: MBS GmbH Universal Gateway A-Series Firmware, MBS GmbH Universal Gateway X-Series Firmware. Vendors: MBS GmbH.

Quick answers

Is CVE-2026-35081 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-35081 being exploited in the wild.
How severe is CVE-2026-35081?: High severity, with a CVSS score of 8.1, published 3 June 2026.
Which products and versions are affected?: MBS GmbH Universal Gateway A-Series Firmware < V6_0_0_7; MBS GmbH Universal Gateway X-Series Firmware < V6_0_0_7.
Is there a fix for CVE-2026-35081?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-35081 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-35081?: Check whether you run MBS GmbH Universal Gateway A-Series Firmware or MBS GmbH Universal Gateway X-Series Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper input validation vulnerability (CWE-20) exists in the 'ugw-logstop' CGI method of the MBS Universal Gateway (UGW) web GUI. The vulnerability stems from insufficient validation of user-supplied input passed to the method, which is used to manage logging processes. A remote attacker with low-level user privileges can exploit this by sending a specially crafted network request to terminate arbitrary processes on the underlying operating system. This can lead to a significant denial-of-service condition or the disabling of security-critical services. The issue is resolved in firmware version V6_0_0_7.

Affected products

MBS GmbH Universal Gateway (UGW) A-Series Firmware < V6_0_0_7
MBS GmbH Universal Gateway (UGW) X-Series Firmware < V6_0_0_7

Timeline

2026-06-03: advisory: Initial advisory published by CERT@VDE
2026-06-03: disclosed: CVE-2026-35081 published to NVD

References

https://www.certvde.com/en/advisories/VDE-2026-039/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.