Description
An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Admin role to upload files with arbitrary content to hardcoded paths.
High · 8.8
CVE-2026-75169
EUVD-2026-71444GHSA-ppjw-q33g-rf64
An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authent…
Published Sep 4, 2026 · Updated Sep 8, 2026 · Assigned by mitre