CVE-2026-60038 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x OpenSSL ImportPKCS12 code injection

November 10, 2026 Yanac

A vulnerability categorized as very critical has been discovered in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. This issue affects the function ImportPKCS12 of the component OpenSSL. The manipulation results in code injection.

This vulnerability is reported as CVE-2026-60038. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More