Skip to contentMb Connect Line vulnerabilities
Newest
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated SQLi in _mb24confi_getTagAlarm functionCVE-2026-408168.7 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated SQLi in _mb24api_getUserAccount functionCVE-2026-408158.7 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated SQLi in _mb24confi_getTagAlarm functionCVE-2026-408148.7 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated SQLi in getLiveValuesCVE-2026-408138.7 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated SQLi in getLiveValues functionCVE-2026-408128.7 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated SQLi in ssoabstractserviceCVE-2026-408118.7 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated SQLi in userinfo EndpointCVE-2026-408108.7 High
- mb connect line mbconnect24, mymbconnect24 +1 moreMB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 EndpointCVE-2026-336175.3 Medium
- mb connect line mbconnect24, mymbconnect24 +1 moreMB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api EndpointCVE-2026-336167.5 High
- mb connect line mbconnect24, mymbconnect24 +1 moreMB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo EndpointCVE-2026-336159.1 Critical
- mb connect line mbconnect24, mymbconnect24 +1 moreMB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpointCVE-2026-336147.5 High
- mb connect line mbconnect24, mymbconnect24 +1 moreMB connect line mbCONNECT24 vulnerable to RCE in generateSrpArrayCVE-2026-336137.2 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 morePre-Auth Blind SQLi in userinfo EndpointCVE-2026-329697.5 High
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated RCE in com_mb24sysapiCVE-2026-329689.8 Critical
- helmholz rex 200/250, rex 300, mb connect line mbnet hw1 +1 more +3 moreHigh Privilege RCE via LUA Sandbox EscapeCVE-2025-416887.2 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 morePersistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of InputCVE-2025-416814.8 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreUnauthenticated Buffer Overflow in Conftool Service Leading to Denial of ServiceCVE-2025-416795.3 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreSQL Injection via POST Requests Allowing Configuration Database ManipulationCVE-2025-416786.5 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreResource Exhaustion via POST Requests to send-mail ActionCVE-2025-416774.9 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreResource Exhaustion via POST Requests to send-sms ActionCVE-2025-416764.9 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection via GET in Cloud Server Communication Script Due to Improper Input NeutralizationCVE-2025-416757.2 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection in diagnostic Action Due to Improper Input NeutralizationCVE-2025-416747.2 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection in send_sms Action Due to Improper Input NeutralizationCVE-2025-416737.2 High
- mb connect line mbconnect24, mymbconnect24, helmholz myrex24 +1 more +3 moreMB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24CVE-2025-30927.5 High
- mb connect line mbconnect24, mymbconnect24, helmholz myrex24 +1 more +3 moreMB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24CVE-2025-30917.5 High
- mb connect line mbconnect24, mymbconnect24, helmholz myrex24 +1 more +3 moreMB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24CVE-2025-30908.2 High
- mb connect line mbconnect24, mbnet, mbnet.rokey +1 more +3 moreMB connect line: Cloud API access due to a lack of authentication for a critical functionCVE-2024-239439.1 Critical
- mb connect line mbconnect24, mbnet, mbnet.rokey +1 more +3 moreMB connect line: Configuration File on the client workstation is not encryptedCVE-2024-239427.1 High
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: tmp directory exposed via webserviceCVE-2024-452767.5 High
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: Hardcoded user accounts with hard-coded passwordsCVE-2024-452759.8 Critical
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: Remote code execution via confnet serviceCVE-2024-452749.8 Critical
- helmholz myrex24 v2, myrex24.virtual, myrex24 v2 virtual server +24 more +26 moreMB connect line/Helmholz: Weak encryption of configuration fileCVE-2024-452738.4 High
- helmholz myrex24 v2, myrex24.virtual, myrex24 v2 virtual server +12 more +14 moreMB connect line/Helmholz: Generation of weak passwords vulnerabilityCVE-2024-452727.5 High
- rex100 helmholz, helmholz rex100, rex 100 firmware +2 more +4 moreMB connect line/Helmholz: Remote code execution due to improper input validationCVE-2024-452718.4 High
- mb connect line mbnet.mini, helmholz rex 100, rex 100 firmware +1 more +3 moreRed Lion Europe: mbNET.mini vulnerable to OS command injectionCVE-2024-56727.2 High
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreIn Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to...CVE-2023-48344.3 Medium
- helmholz rex 200, rex 250, mb connect line mbnet +18 more +20 moreStored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250CVE-2023-344124.8 Medium
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreHelmholz and MB Connect Line: Account takeover via password reset in multiple productsCVE-2023-17794.3 Medium
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreHelmholz and MB Connect Line: Account takeover via password reset in multiple productsCVE-2023-09858.8 High
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreUser enumeration vulnerability in MB connect line and Helmholz productsCVE-2022-225205.3 Medium
- mb connect line mbconnect24, mymbconnect24 +1 moreRemote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0CVE-2021-345807.5 High
- mb connect line mbconnect24, mymbconnect24 +1 moreInformation Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0CVE-2021-345757.5 High
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 morePassword policy evasion in products of MB connect line and HelmholzCVE-2021-345744.3 Medium
- mb connect line mbdialupOS Command Injection in mbDIALUP <= 3.9R0.0CVE-2021-335279.8 Critical
- mb connect line mbdialupPrivilege escalation in mbDIALUP <= 3.9R0.0CVE-2021-335267.8 High
- mb connect line mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions...CVE-2020-125304.3 Medium
- mb connect line mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions...CVE-2020-125295.8 Medium
- mb connect line mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions...CVE-2020-125286.5 Medium
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreImproper Access Validation in products of MB connect line and HelmholzCVE-2020-125276.5 Medium