Product by Helmholz
Helmholz myREX24V2.virtual
43 known vulnerabilities in Helmholz myREX24V2.virtual (Helmholz), 0 of them actively exploited (CISA KEV).
Key figures
43
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-14448 | Authenticated RCE in system_certificates view | 7.2 | |
| Critical | CVE-2026-32968 | Unauthenticated RCE in com_mb24sysapi | 9.8 | |
| High | CVE-2026-40850 | Unauthenticated SQLi in getAccountData function | 7.5 | |
| High | CVE-2026-40817 | Unauthenticated SQLi in getAlarmProfiles function | 7.5 | |
| High | CVE-2026-40815 | Unauthenticated SQLi in _mb24api_getUserAccount function | 7.5 | |
| High | CVE-2026-40816 | Unauthenticated SQLi in _mb24confi_getTagAlarm function | 7.5 | |
| High | CVE-2026-40814 | Unauthenticated SQLi in _mb24confi_getTagAlarm function | 7.5 | |
| High | CVE-2026-40813 | Unauthenticated SQLi in getLiveValues | 7.5 | |
| High | CVE-2026-40812 | Unauthenticated SQLi in getLiveValues function | 7.5 | |
| High | CVE-2026-40811 | Unauthenticated SQLi in ssoabstractservice | 7.5 | |
| High | CVE-2026-40810 | Unauthenticated SQLi in userinfo Endpoint | 7.5 | |
| High | CVE-2026-40819 | Unauthenticated SQLi in sync_data24 task | 7.5 | |
| High | CVE-2026-40818 | Unauthenticated SQLi in _mb24confi_getDevice function function | 7.5 | |
| High | CVE-2026-32969 | Pre-Auth Blind SQLi in userinfo Endpoint | 7.5 | |
| High | CVE-2026-40831 | Authenticated SQLi in Easy View | 6.5 | |
| High | CVE-2026-40830 | Authenticated SQLi in UpdateParam function | 5.5 | |
| High | CVE-2026-40828 | Authenticated SQLi in DeleteSysLogEntry function | 5.5 | |
| High | CVE-2026-40829 | Authenticated SQLi in UpdateParam function | 5.5 | |
| High | CVE-2026-40827 | Authenticated SQLi in _RemoveRequest function | 5.5 | |
| High | CVE-2026-40849 | Authenticated SQLi in user_alarmprofile view | 6.5 | |
| High | CVE-2026-40847 | Authenticated SQLi in system_tag view | 6.5 | |
| High | CVE-2026-40848 | Authenticated SQLi in tag view | 6.5 | |
| High | CVE-2026-40846 | Authenticated SQLi in system view | 6.5 | |
| High | CVE-2026-40845 | Authenticated SQLi in devices_configuration view | 6.5 | |
| High | CVE-2026-40843 | Authenticated SQLi in alarming view | 6.5 |