CVE-2026-35080

HighCVSS 8.1/10Last modified Jul 22, 2026

Description

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-73

Affected software

No affected versions have been published.

Timeline

Published: Jun 3, 2026
Last modified: Jul 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-350818.1The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user CVE-2026-350828.8The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-CVE-2026-350838.8A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.CVE-2026-350848.8A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.CVE-2026-350858.8A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.CVE-2026-350866.5Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz. This issue affects Apache OFBiz:CVE-2026-350879.3Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials b CVE-2026-350888.2Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker CVE-2026-350898.7In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can be obtain CVE-2026-35097.5An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control ru CVE-2026-350909.3In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via CVE-2026-350918.2A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership co