The vulnerability CVE-2026-35081 affects the MBS Single-A product, version V1_0_0_0. It involves improper input validation in the ugw-logstop method, which permits a remote attacker with user-level privileges to terminate arbitrary processes. This is due to insufficient validation of user-supplied input, categorized as CWE-20. The CVSS 4.0 score is 7.2, reflecting network attack vector, low attack complexity, no user interaction, and high impact on integrity and availability. There is no vendor-provided patch or remediation level indicated, and the product is not a cloud service. No exploits are known in the wild at this time.

An attacker with user privileges can remotely terminate arbitrary processes on the affected system, potentially disrupting service availability and compromising system integrity. The vulnerability does not require user interaction and can be exploited over the network with low complexity. No known exploits have been reported, but the impact on process termination is significant.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor vendor communications for updates. Until a patch is released, restricting user privileges and limiting network exposure of the affected service may reduce risk.