CVE-2026-75169

MBS-Solutions X-Serie Gateway firmware V6_00_05 contains an arbitrary file upload vulnerability in the /cgi-bin/ugwupload.cgi endpoint. A remote authenticated user with the Admin role can upload files with arbitrary content to hardcoded paths , potentially allowing an attacker to place malicious ...

EUVD-2026-71444

An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with Admin role to upload files with arbitrary content to hardcoded paths...