CVE-2026-60035 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x Network Auth auth code injection

A vulnerability was found in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. It has been classified as very critical. Affected by this issue is the function auth of the component Network Auth. Performing a manipulation results in code injection.

This vulnerability is cataloged as CVE-2026-60035. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More