Stack Buffer Overflow in Dali-Devconfig Affects System Security
CVE-2026-35084

8.7HIGH

Key Information:

Vendor

Mbs

Status
Single-a
Double-a Profibus
Double-a X-link
Single-x
Vendor
CVE Published:
3 June 2026

What is CVE-2026-35084?

A stack buffer overflow vulnerability exists in Dali-Devconfig, allowing remote attackers with user privileges to exploit it. This can lead to unauthorized access and potential full system control, creating significant risks for users and administrators. Organizations must promptly address this vulnerability to safeguard their systems and prevent exploitation.

Affected Version(s)

Double-A Profibus V1_0_0_0

Double-A x-link V1_0_0_0

Double-X CAN V1_0_0_0

References

https://www.certvde.com/en/advisories/VDE-2026-039/

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adrien Rey from Cyber Defense Campus Zurich
Daniel Hulliger from Armasuisse
.