{"schema_version":1,"title":"MBS GmbH vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in MBS GmbH: 0 in the last 7 days and 2 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-75164, was published on 4 September 2026. 4 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/mbs-gmbh","json_url":"https://junglewise.ai/threats/vendors/mbs-gmbh.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/mbs-gmbh","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":10,"all_time":13,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":2,"last_365_days":13},"latest":[{"cve":"CVE-2026-75164","cvss":6.5,"epss":0.0055,"slug":"cve-2026-75164-mbs-x-serie-gateway-arbitrary-file-read-in-ugwdownload-cgi","title":"MBS X-Serie Gateway arbitrary file read in ugwdownload.cgi","severity":"medium","exploited":false,"published_at":"2026-09-04T16:17:58.33+00:00","url":"https://junglewise.ai/threats/cve-2026-75164-mbs-x-serie-gateway-arbitrary-file-read-in-ugwdownload-cgi"},{"cve":"CVE-2026-75160","cvss":9.1,"epss":0.006,"slug":"cve-2026-75160-mbs-x-serie-gateway-privilege-escalation-in-web-endpoints","title":"MBS X-Serie Gateway privilege escalation in web endpoints","severity":"critical","exploited":false,"published_at":"2026-09-04T16:17:57.827+00:00","url":"https://junglewise.ai/threats/cve-2026-75160-mbs-x-serie-gateway-privilege-escalation-in-web-endpoints"},{"cve":"CVE-2026-35085","cvss":8.8,"slug":"cve-2026-35085-mbs-universal-gateway-stack-buffer-overflow-in-gdv-serverconfig","title":"MBS Universal Gateway stack buffer overflow in gdv-serverconfig","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:21.377+00:00","url":"https://junglewise.ai/threats/cve-2026-35085-mbs-universal-gateway-stack-buffer-overflow-in-gdv-serverconfig"},{"cve":"CVE-2026-35084","cvss":8.8,"slug":"cve-2026-35084-mbs-universal-gateway-stack-buffer-overflow-in-dali-devconfig","title":"MBS Universal Gateway stack buffer overflow in dali-devconfig","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:21.18+00:00","url":"https://junglewise.ai/threats/cve-2026-35084-mbs-universal-gateway-stack-buffer-overflow-in-dali-devconfig"},{"cve":"CVE-2026-35083","cvss":8.8,"slug":"cve-2026-35083-mbs-universal-gateway-stack-buffer-overflow-in-web-gui","title":"MBS Universal Gateway stack buffer overflow in web GUI","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.983+00:00","url":"https://junglewise.ai/threats/cve-2026-35083-mbs-universal-gateway-stack-buffer-overflow-in-web-gui"},{"cve":"CVE-2026-35082","cvss":8.8,"slug":"cve-2026-35082-mbs-universal-gateway-path-traversal-in-ugw-logread","title":"MBS Universal Gateway path traversal in ugw-logread","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.78+00:00","url":"https://junglewise.ai/threats/cve-2026-35082-mbs-universal-gateway-path-traversal-in-ugw-logread"},{"cve":"CVE-2026-35081","cvss":8.1,"slug":"cve-2026-35081-mbs-universal-gateway-arbitrary-process-termination-in-ugw","title":"MBS Universal Gateway arbitrary process termination in ugw-logstop","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.587+00:00","url":"https://junglewise.ai/threats/cve-2026-35081-mbs-universal-gateway-arbitrary-process-termination-in-ugw"},{"cve":"CVE-2026-35080","cvss":8.1,"slug":"cve-2026-35080-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-restoreinfo","title":"MBS Universal Gateway arbitrary file deletion in ugw-restoreinfo","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.383+00:00","url":"https://junglewise.ai/threats/cve-2026-35080-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-restoreinfo"},{"cve":"CVE-2026-35079","cvss":8.1,"slug":"cve-2026-35079-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-restore","title":"MBS Universal Gateway arbitrary file deletion in ugw-restore","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.177+00:00","url":"https://junglewise.ai/threats/cve-2026-35079-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-restore"},{"cve":"CVE-2026-35078","cvss":8.1,"slug":"cve-2026-35078-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-logstop","title":"MBS Universal Gateway arbitrary file deletion in ugw-logstop","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:19.98+00:00","url":"https://junglewise.ai/threats/cve-2026-35078-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-logstop"},{"cve":"CVE-2026-35077","cvss":8.1,"slug":"cve-2026-35077-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-delete-file","title":"MBS Universal Gateway arbitrary file deletion in ugw-delete-file","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:19.76+00:00","url":"https://junglewise.ai/threats/cve-2026-35077-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-delete-file"},{"cve":"CVE-2026-35076","cvss":8.1,"slug":"cve-2026-35076-mbs-universal-gateway-arbitrary-file-deletion-in-bac-scanresult","title":"MBS Universal Gateway arbitrary file deletion in bac-scanresult","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:19.56+00:00","url":"https://junglewise.ai/threats/cve-2026-35076-mbs-universal-gateway-arbitrary-file-deletion-in-bac-scanresult"},{"cve":"CVE-2026-35075","cvss":9.8,"slug":"cve-2026-35075-mbs-universal-gateway-hardcoded-password-in-firmware","title":"MBS Universal Gateway hardcoded password in firmware","severity":"critical","exploited":false,"published_at":"2026-06-03T13:16:19.407+00:00","url":"https://junglewise.ai/threats/cve-2026-35075-mbs-universal-gateway-hardcoded-password-in-firmware"}],"vendor":{"hub":true,"name":"MBS GmbH","slug":"mbs-gmbh","homepage":"https://www.mbs-solutions.de/en/","description":"MBS GmbH is a German manufacturer of industrial communication and building automation products.","url":"https://junglewise.ai/threats/vendors/mbs-gmbh"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-35075","cvss":9.8,"slug":"cve-2026-35075-mbs-universal-gateway-hardcoded-password-in-firmware","title":"MBS Universal Gateway hardcoded password in firmware","severity":"critical","exploited":false,"published_at":"2026-06-03T13:16:19.407+00:00","url":"https://junglewise.ai/threats/cve-2026-35075-mbs-universal-gateway-hardcoded-password-in-firmware"},{"cve":"CVE-2026-75160","cvss":9.1,"epss":0.006,"slug":"cve-2026-75160-mbs-x-serie-gateway-privilege-escalation-in-web-endpoints","title":"MBS X-Serie Gateway privilege escalation in web endpoints","severity":"critical","exploited":false,"published_at":"2026-09-04T16:17:57.827+00:00","url":"https://junglewise.ai/threats/cve-2026-75160-mbs-x-serie-gateway-privilege-escalation-in-web-endpoints"},{"cve":"CVE-2026-35085","cvss":8.8,"slug":"cve-2026-35085-mbs-universal-gateway-stack-buffer-overflow-in-gdv-serverconfig","title":"MBS Universal Gateway stack buffer overflow in gdv-serverconfig","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:21.377+00:00","url":"https://junglewise.ai/threats/cve-2026-35085-mbs-universal-gateway-stack-buffer-overflow-in-gdv-serverconfig"},{"cve":"CVE-2026-35084","cvss":8.8,"slug":"cve-2026-35084-mbs-universal-gateway-stack-buffer-overflow-in-dali-devconfig","title":"MBS Universal Gateway stack buffer overflow in dali-devconfig","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:21.18+00:00","url":"https://junglewise.ai/threats/cve-2026-35084-mbs-universal-gateway-stack-buffer-overflow-in-dali-devconfig"},{"cve":"CVE-2026-35083","cvss":8.8,"slug":"cve-2026-35083-mbs-universal-gateway-stack-buffer-overflow-in-web-gui","title":"MBS Universal Gateway stack buffer overflow in web GUI","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.983+00:00","url":"https://junglewise.ai/threats/cve-2026-35083-mbs-universal-gateway-stack-buffer-overflow-in-web-gui"},{"cve":"CVE-2026-35082","cvss":8.8,"slug":"cve-2026-35082-mbs-universal-gateway-path-traversal-in-ugw-logread","title":"MBS Universal Gateway path traversal in ugw-logread","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.78+00:00","url":"https://junglewise.ai/threats/cve-2026-35082-mbs-universal-gateway-path-traversal-in-ugw-logread"},{"cve":"CVE-2026-35081","cvss":8.1,"slug":"cve-2026-35081-mbs-universal-gateway-arbitrary-process-termination-in-ugw","title":"MBS Universal Gateway arbitrary process termination in ugw-logstop","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.587+00:00","url":"https://junglewise.ai/threats/cve-2026-35081-mbs-universal-gateway-arbitrary-process-termination-in-ugw"},{"cve":"CVE-2026-35080","cvss":8.1,"slug":"cve-2026-35080-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-restoreinfo","title":"MBS Universal Gateway arbitrary file deletion in ugw-restoreinfo","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.383+00:00","url":"https://junglewise.ai/threats/cve-2026-35080-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-restoreinfo"},{"cve":"CVE-2026-35079","cvss":8.1,"slug":"cve-2026-35079-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-restore","title":"MBS Universal Gateway arbitrary file deletion in ugw-restore","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:20.177+00:00","url":"https://junglewise.ai/threats/cve-2026-35079-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-restore"},{"cve":"CVE-2026-35078","cvss":8.1,"slug":"cve-2026-35078-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-logstop","title":"MBS Universal Gateway arbitrary file deletion in ugw-logstop","severity":"high","exploited":false,"published_at":"2026-06-03T13:16:19.98+00:00","url":"https://junglewise.ai/threats/cve-2026-35078-mbs-universal-gateway-arbitrary-file-deletion-in-ugw-logstop"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"MBS GmbH Universal Gateway Firmware","slug":"universal-gateway-firmware","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/universal-gateway-firmware"},{"name":"MBS GmbH Universal Gateway A-Series Firmware","slug":"universal-gateway-a-series-firmware","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/universal-gateway-a-series-firmware"},{"name":"MBS GmbH Universal Gateway X-Series Firmware","slug":"universal-gateway-x-series-firmware","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/universal-gateway-x-series-firmware"},{"name":"MBS GmbH X-Serie Gateway","slug":"x-serie-gateway","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/x-serie-gateway"}]}