This vulnerability (CVE-2026-35085) involves a stack-based buffer overflow (CWE-121) in the gdv-serverconfig component of MBS Single-A version V1_0_0_0. An attacker with existing user privileges can remotely trigger this overflow to escalate privileges to root, potentially gaining full control over the affected system. The CVSS 4.0 vector indicates network-based exploitation with low complexity and no user interaction, and the vulnerability compromises confidentiality, integrity, and availability at a high level. No patch or official remediation guidance has been published by the vendor, and the product is not a cloud service, so remediation depends on vendor updates or workarounds.

Successful exploitation allows a remote attacker with user-level access to execute a stack-based buffer overflow, resulting in full system compromise with root privileges. This can lead to complete loss of confidentiality, integrity, and availability of the affected system running MBS Single-A V1_0_0_0. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should restrict user privileges and network access to the gdv-serverconfig component where possible until a patch is released. Monitor vendor channels for updates and apply patches promptly once available.