Veille CVE

Recherche « MB connect line mymbCONNECT24 »

42 CVE

Critique 0 Élevée 16 Moyenne 26 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « MB connect line mymbCONNECT24 » ✕
  1. CVE-2026-14448 7.2 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity.

  2. CVE-2026-10521 7.2 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24

    An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability.

  3. CVE-2026-40850 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  4. CVE-2026-40849 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  5. CVE-2026-40848 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  6. CVE-2026-40847 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  7. CVE-2026-40846 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  8. CVE-2026-40845 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuration view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  9. CVE-2026-40844 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  10. CVE-2026-40843 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  11. CVE-2026-40842 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  12. CVE-2026-40841 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  13. CVE-2026-40840 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  14. CVE-2026-40839 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  15. CVE-2026-40838 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  16. CVE-2026-40837 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  17. CVE-2026-40836 7.1 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the inmessage model due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  18. CVE-2026-40835 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  19. CVE-2026-40834 7.1 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash_layout.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  20. CVE-2026-40833 7.1 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  21. CVE-2026-40832 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDevicegroups function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  22. CVE-2026-40831 6.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the Easy View due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  23. CVE-2026-40830 5.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  24. CVE-2026-40829 5.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the view.html.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  25. CVE-2026-40828 5.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DeleteSysLogEntry function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  26. CVE-2026-40827 5.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _RemoveRequest function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  27. CVE-2026-40826 4.9 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dsgvo_contracts view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  28. CVE-2026-40825 5.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view devices parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  29. CVE-2026-40824 5.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  30. CVE-2026-40823 5.5 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

  31. CVE-2026-40822 4.9 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  32. CVE-2026-40821 4.9 Moyenne

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  33. CVE-2026-40819 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  34. CVE-2026-40818 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_getDevice function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  35. CVE-2026-40817 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  36. CVE-2026-40816 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files _mb24confi_getTagAlarm function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  37. CVE-2026-40815 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAccount function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  38. CVE-2026-40814 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _mb24confi_getTagAlarm function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  39. CVE-2026-40813 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions tagid parameter due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  40. CVE-2026-40812 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions sn parameter due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  41. CVE-2026-40811 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

  42. CVE-2026-40810 7.5 Élevée

    MB connect line mbCONNECT24 · MB connect line mymbCONNECT24 · Helmholz myREX24V2 · Helmholz myREX24V2.virtual

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.