Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (13 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-60046 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 7.5 High
An unauthenticated remote attacker can perform password resets for any user with known username and email without rate limiting. This can result in a total loss of availabilit since the password will be reseted.
CVE-2026-60045 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 4.9 Medium
A high privileged remote attacker can upload arbitrary files to a guessable location. This can result in a loss of availability and might be chained with other vulnerabilities.
CVE-2026-60044 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 7.5 High
The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content. This can result in a total loss of confidentiality.
CVE-2026-60043 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 9.3 Critical
An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss of integrity and availability.
CVE-2026-60042 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 5.3 Medium
An unauthenticated remote attacker can perform an authentication bypass on the com_check function, potentially triggering traffic on other systems and email alerts. This can result in some loss of availability due to higher system loads.
CVE-2026-60041 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 8.1 High
An unauthenticated remote attacker can perform a CSRF attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss of integrity and availability.
CVE-2026-60040 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 7.5 High
An unauthenticated remote attacker can perform a DoS in the backends backup creation function. This can result in a total loss of availability.
CVE-2026-60039 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 7.2 High
A high privileged remote attacker can perform a code injection in the backends backup restore function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
CVE-2026-60038 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 7.2 High
A high privileged remote attacker can perform an OpenSSL code injection in the backends ImportPKCS12 function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
CVE-2026-60037 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 7.2 High
A high privileged remote attacker can perform an OpenSSL code injection in the frontends device importer function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
CVE-2026-60036 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 7.2 High
A high privileged remote attacker can perform a code injection in the backends patch activate function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
CVE-2026-60035 2 Helmholz, Mb Connect Line 4 Myrex24v2 Firmware, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-10 7.2 High
A high privileged remote attacker can perform a code injection in the backends network auth function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
CVE-2026-32968 3 Helmholz, Mb Connect Line, Mbconnectline 4 Myrex24.virtual, Myrex24 V2, Mb Connect Line Mbconnect24 and 1 more 2026-03-25 9.8 Critical
Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resulting in full system compromise. This vulnerability is a variant attack for CVE-2020-10383.