Vulnerability · Published May 27, 2026 · Assigned by CERTVDE
CVE-2026-40852Command injection via malicious configuration
High 7.2
In plain English
A high-severity OS command injection in REX100 from Helmholz. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.4%top 69.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MB connect line | mbNET/mbNET.rokey | 0.0.0 – through 8.4.4 |
| MB connect line | mbNET.mini | 0.0.0 – through 3.0.2 |
| MB connect line | mbNET/mbNET.rokey | 8.4.4 |
| MB connect line | mbNET.mini | 3.0.2 |
| Helmholz | REX200/250 | 0.0.0 – through 8.4.4 |
| Helmholz | REX100 | 0.0.0 – through 3.0.2 |
| Helmholz | REX200/250 | 8.4.4 |
| Helmholz | REX100 | 3.0.2 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H