VULNERABILITY INTELLIGENCE
CVE-2026-75166
CVSS score8.8 HIGH
EPSS probability0.74%
CISA KEVNot currently listed
Published2026-09-04
Last modified2026-09-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution.
Weakness classification
- CWE-269: Improper Privilege Management
- CWE-276: Incorrect Default Permissions