Skip to content
Critical Vulnerabilities Found in MB connect and myREX24 Systems

Critical Vulnerabilities Found in MB connect and myREX24 Systems

First seen 11 Nov 2026, 02:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 11, 2026 at 02:19 UTC
  • •Critical vulnerabilities in MB connect and myREX24 systems could lead to RCE and DoS.
  • •Attackers can exploit XSS and CSRF vulnerabilities to perform critical actions.
  • •Weak backup security and unrestricted password resets increase the risk of data breaches.

Multiple vulnerabilities have been identified in MB connect line mbCONNECT24/mymbCONNECT24 and Helmholz myREX24V2/myREX24V2.virtual, potentially allowing remote code execution (RCE), denial of service (DoS), and information leakage. These vulnerabilities can lead to a complete loss of confidentiality, integrity, and availability. Attackers can exploit unauthenticated remote access to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks on logged-in backend users, enabling critical system actions like server shutdowns and backup restorations. Additionally, weak static passwords for backups and unrestricted password resets for known users exacerbate the risks. The vulnerabilities are detailed in CVE entries, but specific CVEs were not provided in the articles. The current status indicates that these vulnerabilities are serious and require immediate attention from affected organizations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 11h ago How this analysis works

Timeline

2026-11-11
Vulnerabilities disclosed
Multiple vulnerabilities affecting MB connect and myREX24 systems were disclosed, highlighting severe risks including RCE and DoS.
Article 1
2026-11-11
Vulnerabilities disclosed
Helmholz myREX24V2/myREX24V2.virtual was also reported to have multiple vulnerabilities with similar impacts.
Article 2

More articles in this cluster (2)

Following this threat?

Track MB Connect Line GmbH in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (17)

1 / 3

Common questions

What systems are affected?
The vulnerabilities affect MB connect line mbCONNECT24/mymbCONNECT24 and Helmholz myREX24V2/myREX24V2.virtual.
What types of attacks can occur?
Attackers can exploit XSS, CSRF, and perform RCE or DoS attacks on the affected systems.
What should organizations do now?
Organizations should assess their exposure to these systems and implement necessary security measures immediately.