CVE-2026-75164: n/a

This vulnerability exists in the MBS-Solutions X-Serie Gateway firmware version V6_00_05, specifically in the /cgi-bin/ugwdownload.cgi endpoint. An authenticated user with the Standard role can exploit this flaw by manipulating the file query string parameter to read arbitrary files on the device filesystem. The vulnerability is classified under CWE-552 (Files or Directories Accessible to External Parties). The CVSS v3.1 base score is 6.5, with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact. There is no known public exploit or vendor patch at this time.

An attacker with low-privileged authenticated access can read arbitrary files on the affected device, potentially exposing sensitive information. The confidentiality impact is high, but integrity and availability are not affected. This could lead to information disclosure risks depending on the files accessed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected endpoint to trusted users only and monitor for suspicious activity from authenticated users with Standard role privileges.