The vulnerability identified as CVE-2026-35081 affects the MBS Single-A product. It involves improper input validation (CWE-20) in the ugw-logstop method, which permits a remote attacker possessing user-level privileges to terminate arbitrary processes. The CVSS 4.0 base score is 7.2, indicating high severity, with attack vector network, low attack complexity, no privileges required beyond user level, and no user interaction needed. The vulnerability impacts system integrity and availability by allowing process termination. There is no vendor advisory or patch information available, and the affected versions are not specified.

An attacker with user privileges can remotely terminate arbitrary processes on the affected system, potentially disrupting service availability and impacting system stability. This could lead to denial of service conditions or interruption of critical processes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict user privileges where possible and monitor for unusual process terminations. Avoid exposing the vulnerable service to untrusted networks if feasible.