CVE-2026-75160

CVSS 9.1 (critical) · published 2026-09-04

An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi.

Weakness: CWE-269

Source: NVD CVE-2026-75160

References

• https://en.mbs-solutions.de/mbs
• https://en.mbs-solutions.de/xserie
• https://github.com/SilviaMun/vulnerability-research/tree/main/CVE-2026-75160

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.