Description
The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content. This can result in a total loss of confidentiality.
Published: 2026-11-10
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 10 Nov 2026 08:45:00 +0000

Type Values Removed Values Added
Description The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content. This can result in a total loss of confidentiality.
Title Static backup password
First Time appeared Helmholz
Helmholz myrex24v2 Firmware
Helmholz myrex24v2virtual
Mb Connect Line
Mb Connect Line mbconnect24
Mb Connect Line mymbconnect24
Weaknesses CWE-1393
CPEs cpe:2.3:o:helmholz:myrex24v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:helmholz:myrex24v2virtual:*:*:*:*:*:*:*:*
cpe:2.3:o:mb_connect_line:mbconnect24:*:*:*:*:*:*:*:*
cpe:2.3:o:mb_connect_line:mymbconnect24:*:*:*:*:*:*:*:*
Vendors & Products Helmholz
Helmholz myrex24v2 Firmware
Helmholz myrex24v2virtual
Mb Connect Line
Mb Connect Line mbconnect24
Mb Connect Line mymbconnect24
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Helmholz Myrex24v2 Firmware Myrex24v2virtual
Mb Connect Line Mbconnect24 Mymbconnect24
cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-11-10T08:37:50.850Z

Reserved: 2026-07-08T08:31:07.979Z

Link: CVE-2026-60044

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses