Skip to contentMb Connect Line Mbnet vulnerabilities
- helmholz rex100, rex200/250, mb connect line mbnet.mini +1 more +3 moreCommand injection via malicious configurationCVE-2026-408527.2 High
- helmholz rex100, rex200/250, mb connect line mbnet.mini +1 more +3 moreCommand injection via USBCVE-2026-408518.4 High
- helmholz rex 200/250, rex 300, mb connect line mbnet hw1 +1 more +3 moreHigh Privilege RCE via LUA Sandbox EscapeCVE-2025-416887.2 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 morePersistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of InputCVE-2025-416814.8 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreUnauthenticated Buffer Overflow in Conftool Service Leading to Denial of ServiceCVE-2025-416795.3 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreSQL Injection via POST Requests Allowing Configuration Database ManipulationCVE-2025-416786.5 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreResource Exhaustion via POST Requests to send-mail ActionCVE-2025-416774.9 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreResource Exhaustion via POST Requests to send-sms ActionCVE-2025-416764.9 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection via GET in Cloud Server Communication Script Due to Improper Input NeutralizationCVE-2025-416757.2 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection in diagnostic Action Due to Improper Input NeutralizationCVE-2025-416747.2 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection in send_sms Action Due to Improper Input NeutralizationCVE-2025-416737.2 High
- mb connect line mbconnect24, mbnet, mbnet.rokey +1 more +3 moreMB connect line: Cloud API access due to a lack of authentication for a critical functionCVE-2024-239439.1 Critical
- mb connect line mbconnect24, mbnet, mbnet.rokey +1 more +3 moreMB connect line: Configuration File on the client workstation is not encryptedCVE-2024-239427.1 High
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: tmp directory exposed via webserviceCVE-2024-452767.5 High
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: Hardcoded user accounts with hard-coded passwordsCVE-2024-452759.8 Critical
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: Remote code execution via confnet serviceCVE-2024-452749.8 Critical
- helmholz myrex24 v2, myrex24.virtual, myrex24 v2 virtual server +24 more +26 moreMB connect line/Helmholz: Weak encryption of configuration fileCVE-2024-452738.4 High
- rex100 helmholz, helmholz rex100, rex 100 firmware +2 more +4 moreMB connect line/Helmholz: Remote code execution due to improper input validationCVE-2024-452718.4 High
- mb connect line mbnet.mini, helmholz rex 100, rex 100 firmware +1 more +3 moreRed Lion Europe: mbNET.mini vulnerable to OS command injectionCVE-2024-56727.2 High
- helmholz rex 200, rex 250, mb connect line mbnet +18 more +20 moreStored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250CVE-2023-344124.8 Medium