Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual
view advisory published 2026-06-23
There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-10521US | — | — | ||
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a… | ||||
02
references
External citations — patches, advisories, analysis.
- VDE-2026-070: Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual - HTMLself
- CERT@VDE Security Advisories for helmholzexternal
- VDE-2026-070: Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual - CSAFself
03
remediations (1)
- Fixed
Update the myREX24V2/myREX24V2.virtual instance to version 2.20.2.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan