CVE-2026-75161

Deferred Deferred - Pending Action

Remote Code Execution in MBS-Solutions X-Serie Gateway

Publication date: 2026-09-04

Last updated on: 2026-09-08

Assigner: MITRE

Description

An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to inject arbitrary code into the dpcheck system utility executed as root.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-08

Generated

2026-09-25

AI Q&A

2026-09-04

EPSS Evaluated

2026-09-23

NVD

CVE-2026-75161

EUVD

EUVD-2026-71454

Affected Vendors & Products

Vendor	Product	Version / Range
mbs-solutions	x-serie_gateway	6.00.05

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is in the ugw-restart method of the /cgi-bin/wwwugw.cgi file in MBS-Solutions X-Serie Gateway firmware version V6_00_05. A remote authenticated user with low privileges (Standard role) can inject arbitrary code into the dpcheck system utility, which is executed with root privileges.

Detection Guidance

This vulnerability involves arbitrary code injection via the ugw-restart method in /cgi-bin/wwwugw.cgi. To detect it, inspect network traffic for unusual POST requests to /cgi-bin/wwwugw.cgi with parameters targeting the ugw-restart method. Check system logs for unexpected execution of the dpcheck utility as root. Monitor for unauthorized changes in gateway configurations or firmware files.

Impact Analysis

An attacker could exploit this to execute arbitrary commands as root on the affected gateway. This could lead to full system compromise, unauthorized access, data theft, or disruption of services.

Compliance Impact

This vulnerability allows a remote authenticated user with low privileges to execute arbitrary code as root, which could lead to unauthorized access, data breaches, or system compromise. Such risks may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by exposing sensitive information or failing to maintain system integrity and access controls.

Mitigation Strategies

Immediately update the MBS-Solutions X-Serie Gateway firmware to the latest version to address the arbitrary code injection vulnerability in the ugw-restart method. Ensure only users with necessary privileges can access administrative functions.

Hi! I’m here to help you understand CVE-2026-75161. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70