Is CVE-2026-35084 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-35084 being exploited in the wild.

How severe is CVE-2026-35084?

High severity, with a CVSS score of 8.8, published 3 June 2026.

Which products and versions are affected?

MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7.

Is there a fix for CVE-2026-35084?

A patch was published on 2026-06-03: Fixed in firmware version V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-35084 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-35084?

Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35084: MBS Universal Gateway stack buffer overflow in dali-devconfig

Q: Is there a fix for CVE-2026-35084?

A patch was published on 2026-06-03: Fixed in firmware version V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-35084 attacked?

It is attacked over the network, in device firmware.

Q: Am I affected by CVE-2026-35084?

Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35084 · Severity: high · CVSS 8.8 · Published 2026-06-03

MBS Universal Gateways are devices used in building automation to connect different communication protocols. A security flaw in the device's web management interface allows an authenticated user to take complete control of the system. An attacker could use this access to disrupt building operations, steal configuration data, or gain a permanent foothold on the network.

Technologies: MBS GmbH Universal Gateway Firmware. Vendors: MBS GmbH.

Quick answers

Is CVE-2026-35084 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-35084 being exploited in the wild.
How severe is CVE-2026-35084?: High severity, with a CVSS score of 8.8, published 3 June 2026.
Which products and versions are affected?: MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7.
Is there a fix for CVE-2026-35084?: A patch was published on 2026-06-03: Fixed in firmware version V6_0_0_7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-35084 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-35084?: Check whether you run MBS GmbH Universal Gateway Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow (CWE-121) exists in the 'dali-devconfig' CGI method of the MBS Universal Gateway (UGW) web GUI. The vulnerability is caused by insufficient input validation and a lack of bounds checking on user-supplied data. A remote attacker with valid user-level credentials can exploit this flaw via network requests to execute arbitrary code with root privileges. Successful exploitation results in a full system compromise, allowing for persistent access or denial of service. The issue is addressed in firmware version V6_0_0_7.

Affected products

MBS GmbH Universal Gateway (UGW) Firmware < V6_0_0_7

Timeline

2026-06-03: disclosed
2026-06-03: advisory
2026-06-03: patched: Fixed in firmware version V6_0_0_7

References

https://www.certvde.com/en/advisories/VDE-2026-039/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.