Helmholz vulnerabilities
83 CVEs and advisories name Helmholz as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-41678SQL Injection via POST Requests Allowing Configuration Database Manipulation
- CVE-2025-41677Resource Exhaustion via POST Requests to send-mail Action
- CVE-2025-41676Resource Exhaustion via POST Requests to send-sms Action
- CVE-2025-41675Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization
- CVE-2025-41674Remote Command Injection in diagnostic Action Due to Improper Input Neutralization
- CVE-2025-41673Remote Command Injection in send_sms Action Due to Improper Input Neutralization
- CVE-2025-3092MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24
- CVE-2025-3091MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24
- CVE-2025-3090MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24
- CVE-2024-45276MB connect line/Helmholz: tmp directory exposed via webservice
- CVE-2024-45275MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords
- CVE-2024-45274MB connect line/Helmholz: Remote code execution via confnet service
- CVE-2024-45273MB connect line/Helmholz: Weak encryption of configuration file
- CVE-2024-45272MB connect line/Helmholz: Generation of weak passwords vulnerability
- CVE-2024-45271MB connect line/Helmholz: Remote code execution due to improper input validation
- CVE-2024-5672Red Lion Europe: mbNET.mini vulnerable to OS command injection
- CVE-2023-4834In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implement
- CVE-2023-34412Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250
- CVE-2023-1779Helmholz and MB Connect Line: Account takeover via password reset in multiple products
- CVE-2023-0985Helmholz and MB Connect Line: Account takeover via password reset in multiple products
- CVE-2022-22520User enumeration vulnerability in MB connect line and Helmholz products
- CVE-2021-34574Password policy evasion in products of MB connect line and Helmholz
- CVE-2020-12527Improper Access Validation in products of MB connect line and Helmholz