CVE-2026-75169
Received Received - Intake

Arbitrary File Upload in MBS-Solutions X-Serie Gateway

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: MITRE

Description
An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Admin role to upload files with arbitrary content to hardcoded paths.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-75169
EUVD
EUVD-2026-71444

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mbs-solutions x-serie_gateway 6.00.05

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an arbitrary file upload vulnerability in the MBS-Solutions X-Serie Gateway firmware V6_00_05. It allows a remote authenticated user with Admin privileges to upload files with any content to specific hardcoded paths via the /cgi-bin/ugwupload.cgi endpoint.

Detection Guidance

Check for unauthorized files in hardcoded paths like /cgi-bin/ugwupload.cgi. Monitor network traffic for suspicious uploads to this endpoint. Review admin logs for unexpected file upload activities.

Impact Analysis

An attacker could exploit this to upload malicious files, potentially leading to remote code execution, system compromise, or unauthorized access. It may also allow data theft or disruption of gateway services.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements or HIPAA's security rules. Non-compliance may result in legal penalties or reputational damage.

Mitigation Strategies

Disable the /cgi-bin/ugwupload.cgi endpoint if not required. Restrict admin role access to only necessary users. Update firmware to a patched version if available. Monitor for suspicious file uploads.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75169. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart