Helmholz vulnerabilities
83 CVEs and advisories name Helmholz as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-60046DoS via password reset
- CVE-2026-60045Arbitrary file upload
- CVE-2026-60044Static backup password
- CVE-2026-60043XSS in backend
- CVE-2026-60042Authentication bypass in com_check
- CVE-2026-60041CSRF in backend
- CVE-2026-60040DoS in backup creation
- CVE-2026-60039Command injection in backup restore
- CVE-2026-60038OpenSSL command injection in ImportPKCS12
- CVE-2026-60037OpenSSL command injection in device importer
- CVE-2026-60036Command injection in patch activate
- CVE-2026-60035Command injection in network auth
- CVE-2026-14448Authenticated RCE in system_certificates view
- CVE-2026-40852Command injection via malicious configuration
- CVE-2026-40851Command injection via USB
- CVE-2026-40850Unauthenticated SQLi in getAccountData function
- CVE-2026-40849Authenticated SQLi in user_alarmprofile view
- CVE-2026-40848Authenticated SQLi in tag view
- CVE-2026-40847Authenticated SQLi in system_tag view
- CVE-2026-40846Authenticated SQLi in system view
- CVE-2026-40845Authenticated SQLi in devices_configuration view
- CVE-2026-40844Authenticated SQLi in dashboard view
- CVE-2026-40843Authenticated SQLi in alarming view
- CVE-2026-40842Authenticated SQLi in getWidgetTags function
- CVE-2026-40841Authenticated SQLi in getProjectTags function
- CVE-2026-40840Authenticated SQLi in VerifyCreateLicences function
- CVE-2026-40839Authenticated SQLi in getComponentScalings function
- CVE-2026-40838Authenticated SQLi in getDeviceScalings function
- CVE-2026-40837Authenticated SQLi in getProjectScalings function
- CVE-2026-40836Authenticated SQLi in inmessage model