CVE-2026-35076 | MBS Single-A prior 6_0_0_7 bac-scanresult file inclusion (VDE-2026-039)

A vulnerability was found in MBS Single-A, Double-A Profibus, Double-A x-link, Single-X, Double-X CAN, Double-X DALI, Double-X KNX, Double-X LON, Double-X M-Bus, Double-X PROFINET, Double-X x-link, Triple-X KNX+DALI, Triple-X KNX+LON, Triple-X KNX+M-Bus, Triple-X PROFINET+DALI, Triple-X PROFINET+KNX, Triple-X PROFINET+LON and Triple-X PROFINET+M-Bus. It has been rated as problematic. Impacted is the function bac-scanresult. Performing a manipulation results in file inclusion.

This vulnerability is cataloged as CVE-2026-35076. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More