An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated… (CVE-2026-75164)

The vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows remote authenticated users with Standard role privileges to perform arbitrary file reads via the file parameter in the /cgi-bin/ugwdownload.cgi CGI script. This improper access control weakness (CWE-552) enables disclosure of sensitive files from the device filesystem without requiring elevated privileges. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation allows an attacker with low-privileged authenticated access to read arbitrary files on the device, potentially exposing sensitive information. This confidentiality breach could lead to further attacks or information leakage. There is no indication of impact on system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoint to trusted users only and monitor for suspicious activity involving the /cgi-bin/ugwdownload.cgi interface. Avoid granting unnecessary Standard role access to untrusted users.