Skip to content
OpenAdvisories

Vendor

Helmholz

84 known vulnerabilities.

Products

myREX24V2 56 myREX24V2.virtual 56 myREX24.virtual 11 REX 100 9 myREX24 9 REX100 7 REX200/250 3 myREX24 V2 2 REX300 1 REX 300 1 REX 200/250 1 REX 200 1 REX 250 1 shDialup 0 2.6.2 0 myREX24 V2 virtual 0 REX200 0 REX250 0 REX 200/REX 250 0 FLEXtra FLAT PROFINET-Switch 4-Port 0 FLEXtra FLAT PROFINET-Switch 8-Port 0 FLEXtra FLAT PROFINET-Switch 16-Port 0 FLEXtra IP67 PROFINET-Switch 8-Port 0 WALl IE Standard 4-Port 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-60043

    XSS in backend

    An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss of…

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24
  • Critical 9.8
    CVE-2026-32968

    Unauthenticated RCE in com_mb24sysapi

    Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resulting in full system compromise. This vulnerability is a variant attack for CVE…

    MB connect line Helmholz mymbCONNECT24 myREX24V2.virtual
  • Critical 9.8
    CVE-2024-45275

    MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

    The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

    MB connect line Helmholz mbNET.mini REX100
  • Critical 9.8
    CVE-2024-45274

    MB connect line/Helmholz: Remote code execution via confnet service

    An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.

    MB connect line Helmholz mbNET.mini REX100