Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    VDE-2026-044

    Vulnerability from csaf_mbconnectlinegmbh - Published: 2026-05-27 11:00 - Updated: 2026-07-20 13:30
    Summary
    MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24
    Severity
    High
    Scope
    42 vulnerabilities in this advisory, including CVE-2026-40820.
    CVE-2026-40820

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

    4.9 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
    Fixed: 2 products Known affected: 4 products
    Open the full advisory

    VDE-2026-058

    Vulnerability from csaf_helmholzgmbhcokg - Published: 2026-05-21 11:00 - Updated: 2026-07-20 13:30
    Summary
    Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
    Severity
    High
    Scope
    42 vulnerabilities in this advisory, including CVE-2026-40820.
    CVE-2026-40820

    A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

    4.9 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
    Fixed: 2 products Known affected: 4 products
    Open the full advisory