SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-75162

MEDIUM · CVSS 6.5 EPSS 0.46% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability exists in the opcua-configuration method of the MBS-Solutions X-Serie Gateway firmware, allowing any remote authenticated user, even those with low privileges, to access OPC-UA authentication credentials in cleartext through the JSON API response. This poses a significant risk of unauthorized access to sensitive information, potentially leading to further exploitation of the system. Organizations using this firmware should prioritize patching this vulnerability to safeguard against potential data breaches.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-75162
Severity
MEDIUM
CVSS
6.5
EPSS
0.46%

Original NVD Description

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentials in cleartext via the JSON API response.