{"vulnerability": "CVE-2026-7516", "sightings": [{"uuid": "42149efa-b435-4022-81e4-d0f5e5a74b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muprz7laa42m", "content": "CVE-2026-75160\nThe gateway\u2019s firmware version 6.00.05 has two web pages that can be tricked into giving a remote user higher access than intended. If exploited, an attacker could take control of the device and its network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-04T20:20:04.548437Z"}, {"uuid": "817ee659-5913-493c-885b-84991759218f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupxyz4iyg2j", "content": "\ud83d\udea8 CVE-2026-75160 \u2014 CVSS 9.1 CRITICAL\n\nAn issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75160\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T22:07:20.153387Z"}, {"uuid": "db5f2f47-5d28-426c-8b3d-da8b033ccbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqz6ajsf52r", "content": "\ud83d\udd34 CVE-2026-75160 - Critical (9.1)\n\nAn issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75160/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T08:00:49.982206Z"}, {"uuid": "5b8c0aa3-290d-4781-a6c1-6195f522f2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117231688279141803", "content": "CVE-2026-75160: Critical flaw in X-Serie Gateway Firmware V6_00_05 allows remote privilege escalation via /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. CVSS 9.1. Unpatched\u2014assume exposure. Isolate devices, restrict access, monitor logs now. Details: https://www.valtersit.com/", "creation_timestamp": "2026-09-07T20:40:03.722324Z"}, {"uuid": "d1788446-f064-4454-9a0e-6e08c7fb2271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxejp2lmt2v", "content": "CVE-2026-75160: Critical flaw in X-Serie Gateway Firmware V6_00_05 allows remote privilege escalation via /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. CVSS 9.1. Unpatched\u2014assume exposure. Isolate devices, restrict access, monitor logs now. Details: https://www.valtersit.com/", "creation_timestamp": "2026-09-07T20:40:04.291042Z"}, {"uuid": "d89ef979-95d3-4763-b7a6-edefcf04dd9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75165", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv7mbpjtzc2g", "content": "CVE-2026-75165: Authenticated RCE risk via hidden diagnostics in MBS-Solutions X-Serie Gateway (V6_00_05). Low-privileged users can trigger ugw-ping/traceroute to leak sensitive data. CVSS: N/A, unpatched. Restrict access & monitor logs now. Details: https://www.valtersit.com/cve", "creation_timestamp": "2026-09-11T03:20:02.908197Z"}, {"uuid": "f5936403-00b4-4acf-82bf-08bcdfa6f3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75165", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117250209706950186", "content": "CVE-2026-75165: Authenticated RCE risk via hidden diagnostics in MBS-Solutions X-Serie Gateway (V6_00_05). Low-privileged users can trigger ugw-ping/traceroute to leak sensitive data. CVSS: N/A, unpatched. Restrict access & monitor logs now. Details: https://www.valtersit.com/cve", "creation_timestamp": "2026-09-11T03:10:49.433023Z"}, {"uuid": "b80d9ad1-47d3-435b-8e77-1edad5205a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75162", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvbkcjpdpc2o", "content": "CVE-2026-75162: Info disclosure in MBS-Solutions X-Serie Gateway. Any low-priv user can grab OPC-UA creds in cleartext via /cgi-bin/wwwugw.cgi. CVSS N/A, patch unknown. Assume exposed\u2014restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75162/ #CVE #infosec #OTsec", "creation_timestamp": "2026-09-11T21:50:04.019960Z"}, {"uuid": "6b752724-4c7f-4812-93f3-94dfb55ab041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75162", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117254612752271368", "content": "CVE-2026-75162: Info disclosure in MBS-Solutions X-Serie Gateway. Any low-priv user can grab OPC-UA creds in cleartext via /cgi-bin/wwwugw.cgi. CVSS N/A, patch unknown. Assume exposed\u2014restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75162/ #CVE #infosec #OTsec", "creation_timestamp": "2026-09-11T21:50:04.024070Z"}, {"uuid": "ff53ceff-7615-4225-8ab0-78ac8cd414df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75166", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvelkffegq2t", "content": "CVE-2026-75166: Insecure permission in MBS-Solutions X-Serie Gateway (V6_00_05) lets low-priv user run tcpdump as root, leading to RCE via -z flag. CVSS: N/A. Patch unknown\u2014assume vulnerable. Restrict access & monitor now. https://www.valtersit.com/cve/CVE-2026-75166/ #CVE #infos", "creation_timestamp": "2026-09-13T02:50:19.370818Z"}, {"uuid": "6279865b-f7e6-4408-867d-597a0e05fe5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75166", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117261455745586059", "content": "CVE-2026-75166: Insecure permission in MBS-Solutions X-Serie Gateway (V6_00_05) lets low-priv user run tcpdump as root, leading to RCE via -z flag. CVSS: N/A. Patch unknown\u2014assume vulnerable. Restrict access & monitor now. https://www.valtersit.com/cve/CVE-2026-75166/ #CVE #infos", "creation_timestamp": "2026-09-13T02:50:20.632138Z"}]}