CVE-2026-40851highCWE-1287

CVE-2026-40851: falha de alta gravidade em Helmholz REX100

Command injection via USB

Publicada em

Seguir esta CVE+ Monitorar mbNET.mini+ Monitorar REX100

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.4epss 0.1%
A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Helmholz · REX100Helmholz · REX200/250MB connect line · mbNET/mbNET.rokeyMB connect line · mbNET.mini
CVEs relacionadas — Helmholz REX100

No mesmo produto, das mais perigosas para as menos.

CVE-2024-45274CRITICALMB connect line/Helmholz: Remote code execution via confnet serviceEPSS 1.5%CVE-2024-45275CRITICALMB connect line/Helmholz: Hardcoded user accounts with hard-coded passwordsEPSS 0.8%CVE-2025-41688HIGHHigh Privilege RCE via LUA Sandbox EscapeEPSS 0.8%CVE-2024-45276HIGHMB connect line/Helmholz: tmp directory exposed via webserviceEPSS 0.6%CVE-2026-40852HIGHCommand injection via malicious configurationEPSS 0.4%CVE-2024-45271HIGHMB connect line/Helmholz: Remote code execution due to improper input validationEPSS 0.3%