CVE-2026-60036 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x Backends backends patch activate function code injection

November 10, 2026 Yanac

A vulnerability was found in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x and classified as very critical. Affected by this vulnerability is the function backends patch activate function of the component Backends. Such manipulation leads to code injection.

This vulnerability is listed as CVE-2026-60036. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More