Helmholz myREX24

• CVE-2025-3092 High 7.5 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24 0.5%
• CVE-2025-3091 High 7.5 MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24 0.4%
• CVE-2025-3090 High 8.2 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24 0.5%
• CVE-2023-4834 Medium 4.3 In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged 0.4%
• CVE-2023-1779 Medium 4.3 Helmholz and MB Connect Line: Account takeover via password reset in multiple products 0.5%
• CVE-2023-0985 High 8.8 Helmholz and MB Connect Line: Account takeover via password reset in multiple products 0.8%
• CVE-2022-22520 Medium 5.3 User enumeration vulnerability in MB connect line and Helmholz products 1.0%
• CVE-2021-34574 Medium 4.3 Password policy evasion in products of MB connect line and Helmholz 0.7%
• CVE-2020-12527 Medium 6.5 Improper Access Validation in products of MB connect line and Helmholz 1.0%