cve.bz

helmholz myrex24v2 vulnerabilities, newest first, page 2

Filter
  1. 8.7CVE-2026-40812EPSS 0.3%

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions sn parameter due to improper neutralization of special elements in a SQL SELECT command. This can result in a tota…

  2. 8.7CVE-2026-40811EPSS 0.3%

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confiden…

  3. 8.7CVE-2026-40810EPSS 0.3%

    An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confident…

  4. 7.5CVE-2026-32969EPSS 0.5%

    An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutralization of special elements in a SQL SELECT command. This can result in a t…

  5. 9.8CVE-2026-32968EPSS 0.6%

    Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resulting in full system compromise. This vulnerability is a va…