Skip to content
Threat Feed
Subscribe

Product

MyREX24V2.virtual (<= 2.20.0)

1 brief RSS
high advisory

CVE-2026-14448: Authenticated OS Command Injection in MB connect line and Helmholz Products

CVE-2026-14448 describes an authenticated OS command injection vulnerability in the system_certificates view of MB connect line's mbCONNECT24 and mymbCONNECT24 products, as well as Helmholz's myREX24V2 and myREX24V2.virtual products, all versions up to and including 2.20.0, allowing a high-privileged remote attacker to execute arbitrary commands leading to a total loss of confidentiality, availability, and integrity.

mbCONNECT24 +3 os-command-injection vulnerability rce industrial-control-system
1r 2t 1c