CVE-2026-75162

Published: Sep 4, 2026Modified: Sep 9, 2026Deferred

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentials in cleartext via the JSON API response.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (3)

https://en.mbs-solutions.de/mbs

Source: cve@mitre.org

https://en.mbs-solutions.de/xserie

Source: cve@mitre.org

https://github.com/SilviaMun/vulnerability-research/tree/main/CVE-2026-75162

Source: cve@mitre.org

Timeline

No history available yet.