CVE-2026-60039 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x Backup Restore code injection

November 10, 2026 Yanac

A vulnerability was found in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. It has been declared as very critical. This affects an unknown part of the component Backup Restore. Executing a manipulation can lead to code injection.

This vulnerability is registered as CVE-2026-60039. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More