Privilege Escalation Vulnerability in X-Serie Gateway Firmware by MBS Solutions
CVE-2026-75160

9.1CRITICAL

Key Information:

Vendor: MBS Solutions
Status: X-Serie Gateway Firmware
Vendor: CVE Published:; 4 September 2026

🔔 Create MBS Solutions Vulnerability Alert

What is CVE-2026-75160?

A security flaw in the X-Serie Gateway Firmware version V6_00_05 allows remote attackers to escalate privileges by targeting specific endpoints, namely /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. This vulnerability poses a risk as it may enable unauthorized actions within the system, potentially leading to compromised configurations or sensitive information exposure. Users of the affected firmware are advised to take immediate remediation steps to protect their devices from potential exploitation.

References

https://en.mbs-solutions.de/mbs

https://en.mbs-solutions.de/xserie

https://github.com/SilviaMun/vulnerability-research/tree/...

CVSS V3.1

Score:

9.1

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 4, 2026
Vulnerability Reserved
Aug 17, 2026

CVE-2026-75160 Data

JSON