https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:11:26.735523+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-40852 CVE-2026-40852 — Command injection via malicious configuration 2026-10-02T11:11:26.753903+00:00

Affected: MB connect line mbNET/mbNET.rokey, MB connect line mbNET.mini, Helmholz REX200/250, Helmholz REX100

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.