rainbutterfly/cve_corpus huggingface dataset:
CVE-2026-40834 Authenticated SQLi in saveDashboardLayout function
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash_layout.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non critical table. This can result in a total loss of confidentiality and some loss of integrity.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Published: 2026-05-27T07:55:44.947Z
CVE-2026-40835 Authenticated SQLi in saveObjectFromData function
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:56:00.875Z
CVE-2026-40836 Authenticated SQLi in inmessage model
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the inmessage model due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Published: 2026-05-27T07:56:21.298Z
CVE-2026-40837 Authenticated SQLi in getProjectScalings function
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:56:35.787Z
CVE-2026-40838 Authenticated SQLi in getDeviceScalings function
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:56:51.479Z
CVE-2026-40839 Authenticated SQLi in getComponentScalings function
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:57:07.966Z
CVE-2026-40840 Authenticated SQLi in VerifyCreateLicences function
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:57:21.811Z
CVE-2026-40841 Authenticated SQLi in getProjectTags function
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:57:38.881Z
CVE-2026-40842 Authenticated SQLi in getWidgetTags function
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:57:52.556Z
CVE-2026-40843 Authenticated SQLi in alarming view
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:58:05.399Z
CVE-2026-40844 Authenticated SQLi in dashboard view
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:58:25.864Z
CVE-2026-40845 Authenticated SQLi in devices_configuration view
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuration view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:58:44.537Z
CVE-2026-40846 Authenticated SQLi in system view
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:58:59.970Z
CVE-2026-40847 Authenticated SQLi in system_tag view
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:59:14.019Z
CVE-2026-40848 Authenticated SQLi in tag view
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:59:29.242Z
CVE-2026-40849 Authenticated SQLi in user_alarmprofile view
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T07:59:44.789Z
CVE-2026-40850 Unauthenticated SQLi in getAccountData function
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mbCONNECT24
default_status: unaffected
vendor: MB connect line
product: mymbCONNECT24
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
vendor: Helmholz
product: myREX24V2
default_status: unaffected
vendor: Helmholz
product: myREX24V2.virtual
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-05-27T08:00:01.201Z