Helmholz: Multiple Vulnerabilities in myREX24V2 / myREX24V2.virtual
view advisory published 2026-03-23
Multiple vulnerabilities have been discovered in Helmholz myREX24V2 / myREX24V2.virtual that could allow unauthenticated RCE or SQLi.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-32969US | — | — | ||
An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutralization of speci… | ||||
| CVE-2026-32968US | — | — | ||
Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resu… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Fixed
Update the myREX24V2 / myREX24V2.virtual instance to version 2.19.4.
- Fixed
Update the myREX24V2 / myREX24V2.virtual instance to version 2.19.4.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan