Skip to content
OpenAdvisories
High VDE-2026-070 1 CVE

Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual

Published Jun 23, 2026 · Updated Jun 23, 2026 · Revision 2

Vendor: Helmholz Product: myREX24V2.virtual

Summary

There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.

Details

Impact
CVE-2026-10521 allows an authenticated remote attacker to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability.

Remediation
Update the myREX24V2/myREX24V2.virtual instance to version 2.20.2.

Vulnerabilities 1

  • High 7.2
    CVE-2026-10521

    Authenticated unintended access to critical program parameters

    An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability.

    MB connect line mymbCONNECT24 mbCONNECT24

Revision history

  1. #1.0.1

    The alias has been corrected

  2. #1.0.0

    Initial revision.

References