Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2026-40852

Command injection via malicious configuration

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line
Products
Rex100 Rex200 250 Mbnet and 2 more
CVE-2026-40851

Command injection via USB

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line
Products
Rex100 Rex200 250 Mbnet and 2 more
CVE-2025-41673

Remote Command Injection in send_sms Action Due to Improper Input Neutralization

A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line Mbconnectline
Products
Rex 100 Mbnet.mini Mbnet.mini and 1 more
CVE-2025-41675

Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization

A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line Mbconnectline
Products
Rex 100 Mbnet.mini Mbnet.mini and 1 more
CVE-2025-41679

Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service

An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line Mbconnectline
Products
Rex 100 Mbnet.mini Mbnet.mini and 1 more