CVE-2026-60037 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x Device Importer code injection

November 10, 2026 Yanac

A vulnerability has been found in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x and classified as very critical. Affected is an unknown function of the component Device Importer. This manipulation causes code injection.

This vulnerability is tracked as CVE-2026-60037. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More