The vulnerability identified as CVE-2026-35078 affects MBS Single-A version V1_0_0_0. It involves the ugw-logstop method, which improperly validates user input controlling file names or paths. This flaw allows a remote attacker with user-level privileges to delete arbitrary local files on the affected system. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and high impact on integrity and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation is the responsibility of the user.

Successful exploitation allows an attacker with user privileges to delete arbitrary files on the local system, potentially leading to loss of critical data or disruption of service. The integrity and availability of the affected system are impacted. There is no indication of privilege escalation or confidentiality impact from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should restrict access to the ugw-logstop method to trusted users only and monitor for suspicious activity related to file deletions. Follow up with the vendor for updates on patches or official mitigations.