SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-75164

MEDIUM · CVSS 6.5 EPSS 0.40% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

An arbitrary file read vulnerability exists in the /cgi-bin/ugwdownload.cgi component of MBS-Solutions X-Serie Gateway firmware V6_00_05, allowing remote authenticated users with low-privileged Standard roles to access sensitive files on the device filesystem through manipulated query string parameters. This could lead to unauthorized exposure of confidential information, making it critical for organizations using this firmware to prioritize remediation. Users of MBS-Solutions X-Serie Gateway should assess their exposure and implement necessary security measures immediately.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-75164
Severity
MEDIUM
CVSS
6.5
EPSS
0.40%

Original NVD Description

An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to retrieve arbitrary files from the device filesystem via the file query string parameter.