PT-2026-45916 · Mbs+1 · Double-A Profibus+18

Adrien Rey + 2 · CVE-2026-35075 · Published 2026-06-03 · Updated 2026-07-03

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Recover firmware (affected versions not specified)

Description An unauthenticated remote attacker can recover a default, hard-coded password from a firmware image, allowing them to gain full access to affected devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Isolate affected devices immediately to minimize the risk of exploitation.

Weakness Enumeration

CWE-1393

Related Identifiers

CVE-2026-35075

Affected Products

Double-A Profibus

Double-A X-Link

Double-X Can

Double-X Dali

Double-X Knx

Double-X Lon

Double-X M-Bus

Double-X Profinet

Double-X X-Link

Single-A

Single-X

Triple-X Knx+Dali

Triple-X Knx+Lon

Triple-X Knx+M-Bus

Triple-X Profinet+Dali

Triple-X Profinet+Knx

Triple-X Profinet+Lon

Triple-X Profinet+M-Bus

Universal Gateway Firmware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-35075 · Security Note
• https://certvde.com/en/advisories/VDE-2026-039 · Vendor Advisory
• https://twitter.com/HugoValters/status/2063769473824534542 · Twitter Post
• https://twitter.com/PurpleOps_io/status/2062391752791658885 · Twitter Post
• https://t.me/cveNotify/166559 · Telegram Post
• https://t.me/cveNotify/185769 · Telegram Post