Login Request a demo
HE
Vendor
Helmholz
14 products with CVEs on record
141
CVEs
0
On KEV
0
New 30D
Products
MY
myREX24V2
Helmholz
9.8
43 CVEs0 on KEV0 new
MY
myREX24V2.virtual
Helmholz
9.8
43 CVEs0 on KEV0 new
MY
myREX24
Helmholz
8.2
13 CVEs0 on KEV0 new
MY
myREX24.virtual
Helmholz
8.2
13 CVEs0 on KEV0 new
R1
REX 100
Helmholz
7.5
8 CVEs0 on KEV0 new
R1
Rex 100 Firmware
Helmholz
9.8
5 CVEs0 on KEV0 new
R2
Rex 200 Firmware
Helmholz
7.8
3 CVEs0 on KEV0 new
R2
Rex 250 Firmware
Helmholz
7.8
3 CVEs0 on KEV0 new
MV
Myrex24 V2 Virtual Server
Helmholz
7.8
2 CVEs0 on KEV0 new
R3
Rex 300 Firmware
Helmholz
7.8
2 CVEs0 on KEV0 new
RE
REX100
Helmholz
8.4
2 CVEs0 on KEV0 new
RE
REX200/250
Helmholz
8.4
2 CVEs0 on KEV0 new
R2
REX 200/250
Helmholz
7.2
1 CVEs0 on KEV0 new
R3
REX 300
Helmholz
7.2
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-14448
MY
myREX24V2
Helmholz
7.2
1%
Jul 20Authenticated RCE in system_certificates view
CVE-2026-40852
RE
REX100
Helmholz
7.2
0%
May 27Command injection via malicious configuration
CVE-2026-40851
RE
REX200/250
Helmholz
8.4
0%
May 27Command injection via USB
CVE-2026-40850
MY
myREX24V2.virtual
Helmholz
7.5
0%
May 27Unauthenticated SQLi in getAccountData function
CVE-2026-40849
MY
myREX24V2.virtual
Helmholz
6.5
0%
May 27Authenticated SQLi in user_alarmprofile view
CVE-2026-40848
MY
myREX24V2.virtual
Helmholz
6.5
0%
May 27Authenticated SQLi in tag view
CVE-2026-40847
MY
myREX24V2.virtual
Helmholz
6.5
0%
May 27Authenticated SQLi in system_tag view
CVE-2026-40846
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in system view
CVE-2026-40845
MY
myREX24V2.virtual
Helmholz
6.5
0%
May 27Authenticated SQLi in devices_configuration view
CVE-2026-40844
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in dashboard view
CVE-2026-40843
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in alarming view
CVE-2026-40842
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in getWidgetTags function
CVE-2026-40841
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in getProjectTags function
CVE-2026-40840
MY
myREX24V2.virtual
Helmholz
6.5
0%
May 27Authenticated SQLi in VerifyCreateLicences function
CVE-2026-40839
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in getComponentScalings function
CVE-2026-40838
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in getDeviceScalings function
CVE-2026-40837
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in getProjectScalings function
CVE-2026-40836
MY
myREX24V2.virtual
Helmholz
7.1
0%
May 27Authenticated SQLi in inmessage model
CVE-2026-40835
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in saveObjectFromData function
CVE-2026-40834
MY
myREX24V2.virtual
Helmholz
7.1
0%
May 27Authenticated SQLi in saveDashboardLayout function
CVE-2026-40833
MY
myREX24V2.virtual
Helmholz
7.1
0%
May 27Authenticated SQLi in saveDashboardLayout function
CVE-2026-40832
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in getDevicegroups function
CVE-2026-40831
MY
myREX24V2
Helmholz
6.5
0%
May 27Authenticated SQLi in Easy View
CVE-2026-40830
MY
myREX24V2
Helmholz
5.5
0%
May 27Authenticated SQLi in UpdateParam function
CVE-2026-40829
MY
myREX24V2
Helmholz
5.5
0%
May 27Authenticated SQLi in UpdateParam function
CVE-2026-40828
MY
myREX24V2
Helmholz
5.5
0%
May 27Authenticated SQLi in DeleteSysLogEntry function
CVE-2026-40827
MY
myREX24V2
Helmholz
5.5
0%
May 27Authenticated SQLi in _RemoveRequest function
CVE-2026-40826
MY
myREX24V2
Helmholz
4.9
0%
May 27Authenticated SQLi in dsgvo_contracts view
CVE-2026-40825
MY
myREX24V2.virtual
Helmholz
5.5
0%
May 27Authenticated SQLi in accountstatus view
CVE-2026-40824
MY
myREX24V2.virtual
Helmholz
5.5
0%
May 27Authenticated SQLi in accountstatus view
CVE-2026-40823
MY
myREX24V2
Helmholz
5.5
0%
May 27Authenticated SQLi in DevSerialReset function
CVE-2026-40822
MY
myREX24V2.virtual
Helmholz
4.9
0%
May 27Authenticated SQLi in DevSerialReset function
CVE-2026-40821
MY
myREX24V2.virtual
Helmholz
4.9
0%
May 27Authenticated SQLi in getAccountByID function
CVE-2026-40819
MY
myREX24V2
Helmholz
7.5
0%
May 27Unauthenticated SQLi in sync_data24 task
CVE-2026-40818
MY
myREX24V2
Helmholz
7.5
0%
May 27Unauthenticated SQLi in _mb24confi_getDevice function function
CVE-2026-40817
MY
myREX24V2.virtual
Helmholz
7.5
0%
May 27Unauthenticated SQLi in getAlarmProfiles function
CVE-2026-40816
MY
myREX24V2
Helmholz
7.5
0%
May 27Unauthenticated SQLi in _mb24confi_getTagAlarm function
CVE-2026-40815
MY
myREX24V2.virtual
Helmholz
7.5
0%
May 27Unauthenticated SQLi in _mb24api_getUserAccount function
CVE-2026-40814
MY
myREX24V2
Helmholz
7.5
0%
May 27Unauthenticated SQLi in _mb24confi_getTagAlarm function
CVE-2026-40813
MY
myREX24V2
Helmholz
7.5
0%
May 27Unauthenticated SQLi in getLiveValues
CVE-2026-40812
MY
myREX24V2.virtual
Helmholz
7.5
0%
May 27Unauthenticated SQLi in getLiveValues function
CVE-2026-40811
MY
myREX24V2.virtual
Helmholz
7.5
0%
May 27Unauthenticated SQLi in ssoabstractservice
CVE-2026-40810
MY
myREX24V2.virtual
Helmholz
7.5
0%
May 27Unauthenticated SQLi in userinfo Endpoint
CVE-2026-32969
MY
myREX24V2
Helmholz
7.5
0%
Mar 23Pre-Auth Blind SQLi in userinfo Endpoint
CVE-2026-32968
MY
myREX24V2.virtual
Helmholz
9.8
1%
Mar 23Unauthenticated RCE in com_mb24sysapi
CVE-2025-41688
R2
REX 200/250
Helmholz
7.2
1%
Jul 31High Privilege RCE via LUA Sandbox Escape
CVE-2025-41681
R1
REX 100
Helmholz
4.8
0%
Jul 21Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input
CVE-2025-41679
R1
REX 100
Helmholz
7.5
1%
Jul 21Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service
CVE-2025-41678
R1
REX 100
Helmholz
7.2
1%
Jul 21SQL Injection via POST Requests Allowing Configuration Database Manipulation
CVE-2025-41677
R1
REX 100
Helmholz
4.9
1%
Jul 21Resource Exhaustion via POST Requests to send-mail Action
CVE-2025-41676
R1
REX 100
Helmholz
4.9
1%
Jul 21Resource Exhaustion via POST Requests to send-sms Action
CVE-2025-41675
R1
REX 100
Helmholz
7.2
1%
Jul 21Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization
CVE-2025-41674
R1
REX 100
Helmholz
7.2
1%
Jul 21Remote Command Injection in diagnostic Action Due to Improper Input Neutralization
CVE-2025-41673
R1
REX 100
Helmholz
7.2
1%
Jul 21Remote Command Injection in send_sms Action Due to Improper Input Neutralization
CVE-2025-3092
MY
myREX24
Helmholz
7.5
0%
Jun 24MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24
CVE-2025-3091
MY
myREX24
Helmholz
7.5
0%
Jun 24MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24
CVE-2025-3090
MY
myREX24.virtual
Helmholz
8.2
0%
Jun 24MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24
CVE-2024-45276
R1
Rex 100 Firmware
Helmholz
7.5
1%
Oct 15An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication
CVE-2024-45275
R1
Rex 100 Firmware
Helmholz
9.8
1%
Oct 15The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices
CVE-2024-45274
R1
Rex 100 Firmware
Helmholz
9.8
2%
Oct 15An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication