CVE-2026-75166: n/a

This vulnerability arises from improper permission settings on /usr/bin/tcpdump in MBS-Solutions X-Serie Gateway firmware V6_00_05. A low-privileged service user can run tcpdump as root without authentication. By exploiting the tcpdump -z option, an attacker with authentication can execute arbitrary commands as root, leading to full system compromise. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an authenticated attacker with low privileges to execute arbitrary commands as root, resulting in full system compromise including complete control over confidentiality, integrity, and availability of the affected device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected device to trusted users only and monitor for unauthorized access. Avoid exposing the vulnerable service to untrusted networks.