CVE-2026-75168: n/a

This vulnerability exists in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05. It permits a remote authenticated user with the Standard role, which is low-privileged, to write arbitrary content to configuration files located in /uxx/config/ and /ugw/config/. The CVSS v3.1 score is 6.3, indicating a medium severity with network attack vector, low attack complexity, and no user interaction required. The weakness is categorized under CWE-284 (Improper Access Control). No vendor advisory or patch information is currently available.

An attacker with low-privileged authenticated access can modify configuration files arbitrarily, potentially affecting system confidentiality, integrity, and availability. The impact is limited to users who can authenticate with the Standard role. There is no evidence of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to authenticated users with the Standard role and monitor for suspicious activity related to configuration file modifications.