CVE-2026-75160: n/a

This vulnerability in X-Serie Gateway Firmware V6_00_05 enables remote privilege escalation through the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, and no user interaction. The impact includes high confidentiality and integrity compromise, with no impact on availability. The vulnerability is classified under CWE-269 (Improper Privilege Management). No vendor advisory or patch information is provided at this time.

Successful exploitation allows a remote attacker to escalate privileges on the affected device, potentially gaining unauthorized access to sensitive information and control over the system. The confidentiality and integrity of the system are severely impacted, but availability is not affected. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected endpoints and monitor for suspicious activity related to these CGI scripts. Avoid exposing the device to untrusted networks.