Is CVE-2026-35083 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-35083 being exploited in the wild.

How severe is CVE-2026-35083?

High severity, with a CVSS score of 8.8, published 3 June 2026.

Which products and versions are affected?

MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7.

Is there a fix for CVE-2026-35083?

A patch was published on 2026-06-03: Fixed in firmware version V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-35083 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-35083?

Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35083: MBS Universal Gateway stack buffer overflow in web GUI

Q: Is there a fix for CVE-2026-35083?

A patch was published on 2026-06-03: Fixed in firmware version V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-35083 attacked?

It is attacked over the network, in device firmware.

Q: Am I affected by CVE-2026-35083?

Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35083 · Severity: high · CVSS 8.8 · Published 2026-06-03

MBS Universal Gateways, which are used to connect different communication protocols in building automation systems, are vulnerable to a security flaw in their web management interface. An attacker with basic user credentials can exploit this weakness to take complete control of the device with administrative (root) privileges. This could allow an unauthorized party to disrupt building operations, access sensitive configuration data, or use the device as a foothold in the corporate network.

Technologies: MBS GmbH Universal Gateway Firmware. Vendors: MBS GmbH.

Quick answers

Is CVE-2026-35083 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-35083 being exploited in the wild.
How severe is CVE-2026-35083?: High severity, with a CVSS score of 8.8, published 3 June 2026.
Which products and versions are affected?: MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7.
Is there a fix for CVE-2026-35083?: A patch was published on 2026-06-03: Fixed in firmware version V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-35083 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-35083?: Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow vulnerability (CWE-121) exists in the web-based graphical user interface (GUI) of MBS Universal Gateway (UGW) devices. The flaw is caused by insufficient bounds checking on user-supplied input within certain CGI methods. A remote attacker with valid user-level authentication can exploit this vulnerability by sending specially crafted network requests to the affected CGI endpoints. Successful exploitation allows for arbitrary code execution with root privileges, leading to full system compromise. The vulnerability is addressed in firmware version V6_0_0_7.

Affected products

MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7

Timeline

2026-06-03: disclosed
2026-06-03: advisory
2026-06-03: patched: Fixed in firmware version V6_0_0_7

References

https://www.certvde.com/en/advisories/VDE-2026-039/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.