A vulnerability described as critical has been identified in MBS Single-A, Double-A Profibus, Double-A x-link, Single-X, Double-X CAN, Double-X DALI, Double-X KNX, Double-X LON, Double-X M-Bus, Double-X PROFINET, Double-X x-link, Triple-X KNX+DALI, Triple-X KNX+LON, Triple-X KNX+M-Bus, Triple-X PROFINET+DALI, Triple-X PROFINET+KNX, Triple-X PROFINET+LON and Triple-X PROFINET+M-Bus. Affected is the function
ugw-logread. Such manipulation leads to path traversal.
This vulnerability is traded as CVE-2026-35082. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is recommended.
