CVE-2026-75169

MBS-Solutions X-Serie Gateway firmware V6_00_05 contains an arbitrary file upload vulnerability in the /cgi-bin/ugwupload.cgi endpoint. A remote authenticated user with the Admin role can upload files with arbitrary content to hardcoded paths , potentially allowing an attacker to place malicious ...