Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-40852

Command injection via malicious configuration

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line
Products
Rex100 Rex200 250 Mbnet and 2 more
CVE-2026-40851

Command injection via USB

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Helmholz Mb Connect Line
Products
Rex100 Rex200 250 Mbnet and 2 more