← Database
CVE-2026-35075
CRITICAL
CVSS: 9.8
Published: 2026-06-03
Modified: 2026-07-22
Description
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
Affected Platforms
Mbs-Solutions Double-X DaliMbs-Solutions Double-A X-LinkMbs-Solutions Triple-X Profinet\+M-BusMbs-Solutions Single-AMbs-Solutions Triple-X Profinet\+LonMbs-Solutions Triple-X Profinet\+DaliMbs-Solutions Triple-X Profinet\+KnxMbs-Solutions Double-X KnxMbs-Solutions Single-XMbs-Solutions Double-X X-Link