CRITICAL SeverityCVSS 3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2026-32968

Last updated Mar 23, 2026 · Published Mar 23, 2026

Description

Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resulting in full system compromise. This vulnerability is a variant attack for CVE-2020-10383.

Affected products

1 listed

Helmholz:myREX24V2; Helmholz:myREX24V2.virtual; MB connect line:MB connect line mbCONNECT24; MB connect line:mymbCONNECT24

Mappings

CWE

CWE-78

CAPEC

None listed.