{"id":"CVE-2026-60040","kind":"vulnerability","aliases":["CVE-2026-60040"],"related":[],"title":"MB connect line mbCONNECT24/mymbCONNECT24 and Helmholz myREX24V2: unauthenticated attacker can crash the backup creation function","description":"An unauthenticated remote attacker can perform a DoS in the backends backup creation function. This can result in a total loss of availability.","summary":"An unauthenticated remote attacker can cause a denial of service in the backup creation function of the web backend (CWE-770, resource allocation without limits). Vendor advisories rate it 7.5 (CVSS 3.1) with total loss of availability. Fixed in firmware 2.21.0. No exploitation or PoC is reported in the advisories.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"mbCONNECT24","fixed":["2.21.0"],"affected":"< 2.21.0","ecosystem":"vendor"},{"name":"mymbCONNECT24","fixed":["2.21.0"],"affected":"< 2.21.0","ecosystem":"vendor"},{"name":"myREX24V2","fixed":["2.21.0"],"affected":"< 2.21.0","ecosystem":"vendor"},{"name":"myREX24V2.virtual","fixed":["2.21.0"],"affected":"< 2.21.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["backend","backup","dos","helmholz","industrial","mb-connect-line","mbconnect24","mymbconnect24","myrex24","other","remote-access","unauthenticated"],"not_affected_if":["firmware-2.21.0-or-later","not-internet-exposed"],"how_to_check":"Check the firmware version of your mbCONNECT24, mymbCONNECT24, myREX24V2 or myREX24V2.virtual instance. Anything below 2.21.0 is affected. Also check whether the web interface is reachable from the Internet.","fix":"Update the instance to firmware 2.21.0 or later (the vendor's remediation).","status":"open","published_at":"2026-11-10T09:17:23+00:00","first_seen_at":"2026-11-10T09:21:08+00:00","triaged_at":"2026-11-10T09:21:13+00:00","updated_at":"2026-11-10T09:25:46+00:00","category":"other","confidence":0.85,"triage":{"at":"2026-11-10T09:21:13Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Unauthenticated remote attacker can crash a backend's backup creation function","impact":"low","summary":"An unauthenticated remote attacker can trigger a denial of service in the backend's backup creation function. The sources say this can cause a total loss of availability.","audience":"businesses","category":"other","nicknames":[],"who_cares":["backup","backend"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"Service becomes unavailable through a remote, unauthenticated request","analyst_note":"Identify the affected backend product and its fixed versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-60040.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000627,"input_tokens":4484,"output_tokens":358,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected backend product and its fixed versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-60040.","search":"'-2026':17A,20A '-60040':18A,21A '-770':63B '2.21.0':83B '3.1':74B '7.5':72B 'access':41B 'advisori':69B,92B 'alloc':65B 'attack':9A,46B,96C 'avail':79B,115C 'backend':26B,61B,103C 'backup':13A,27B,55B,104C 'caus':48B 'connect':2A,33B 'crash':11A 'creation':14A,56B,105C 'cve':16A,19A 'cvss':73B 'cwe':62B 'denial':50B 'dos':28B,100C 'exploit':85B 'firmwar':82B 'fix':80B 'function':15A,57B,106C 'helmholz':6A,29B 'industri':30B 'limit':67B 'line':3A,34B 'loss':77B,113C 'mb':1A,32B 'mb-connect-lin':31B 'mbconnect24':22A,35B 'mbconnect24/mymbconnect24':4A 'mymbconnect24':23A,36B 'myrex24':37B 'myrex24v2':7A,24A 'myrex24v2.virtual':25A 'perform':98C 'poc':87B 'rate':70B 'remot':40B,45B,95C 'remote-access':39B 'report':89B 'resourc':64B 'result':109C 'servic':52B 'total':76B,112C 'unauthent':8A,42B,44B,94C 'vendor':68B 'web':60B 'without':66B","nicknames":[],"mitigations":[],"who_affected":"Teams that run their own MB connect line mbCONNECT24/mymbCONNECT24 or Helmholz myREX24V2/myREX24V2.virtual remote-access servers on firmware below 2.21.0. Anyone who can reach the web backend can trigger it without logging in. Everyone on 2.21.0 or later can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T09:25:46Z","by":"analyst","doc":"https://www.certvde.com/en/advisories/VDE-2026-141/","run_id":2432},"products":{"at":"2026-11-10T09:25:46Z","by":"analyst","doc":"https://www.certvde.com/en/advisories/VDE-2026-141/","run_id":2432},"how_to_check":{"at":"2026-11-10T09:25:46Z","by":"analyst","doc":"https://www.certvde.com/en/advisories/VDE-2026-141/","run_id":2432},"who_affected":{"at":"2026-11-10T09:25:46Z","by":"analyst","doc":"https://www.certvde.com/en/advisories/VDE-2026-141/","run_id":2432}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["mbconnect24","mymbconnect24","myrex24v2","myrex24v2virtual"],"ptokens":["mbconnect24","mymbconnect24","myrex24v2","virtual"],"labels":["backend","backup","dos","helmholz","high","industrial","mbconnect24","mbconnectline","mymbconnect24","myrex24","other","remoteaccess","unauthenticated"],"campaign_type":null,"search_a":"'-2026':17A,20A '-60040':18A,21A 'attack':9A 'backup':13A 'connect':2A 'crash':11A 'creation':14A 'cve':16A,19A 'function':15A 'helmholz':6A 'line':3A 'mb':1A 'mbconnect24':22A 'mbconnect24/mymbconnect24':4A 'mymbconnect24':23A 'myrex24v2':7A,24A 'myrex24v2.virtual':25A 'unauthent':8A","search_b":"'-770':63B '2.21.0':83B '3.1':74B '7.5':72B 'access':41B 'advisori':69B,92B 'alloc':65B 'attack':46B 'avail':79B 'backend':26B,61B 'backup':27B,55B 'caus':48B 'connect':33B 'creation':56B 'cvss':73B 'cwe':62B 'denial':50B 'dos':28B 'exploit':85B 'firmwar':82B 'fix':80B 'function':57B 'helmholz':29B 'industri':30B 'limit':67B 'line':34B 'loss':77B 'mb':32B 'mb-connect-lin':31B 'mbconnect24':35B 'mymbconnect24':36B 'myrex24':37B 'poc':87B 'rate':70B 'remot':40B,45B 'remote-access':39B 'report':89B 'resourc':64B 'servic':52B 'total':76B 'unauthent':42B,44B 'vendor':68B 'web':60B 'without':66B","search_c":"'attack':96C 'avail':115C 'backend':103C 'backup':104C 'creation':105C 'dos':100C 'function':106C 'loss':113C 'perform':98C 'remot':95C 'result':109C 'total':112C 'unauthent':94C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T09:17:23+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"info@cert.vde.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-60040","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60040","severity":null,"published_at":"2026-11-10T09:17:23+00:00","modified_at":"2026-11-10T09:17:23+00:00","first_seen_at":"2026-11-10T09:21:08+00:00","fetched_at":"2026-11-10T09:21:08+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-60040:2432","url":"https://www.certvde.com/en/advisories/VDE-2026-079/","severity":null,"published_at":"2026-11-10T09:25:46+00:00","modified_at":"2026-11-10T09:25:46+00:00","first_seen_at":"2026-11-10T09:25:46+00:00","fetched_at":"2026-11-10T09:25:46+00:00","note":"Read CERT@VDE VDE-2026-079 (MB connect line) and VDE-2026-141 (Helmholz): firmware <2.21.0 affected, update to 2.21.0. Same advisories cover 11 sibling CVEs (CVE-2026-60035..60046). No exploitation/PoC found. NVD page returned empty; CVSS 8.7 is the v4 score from CNA, advisory says 7.5 v3.1.","cites":["https://www.certvde.com/en/advisories/VDE-2026-079/","https://www.certvde.com/en/advisories/VDE-2026-141/"]}],"documents":[{"id":114194,"url":"https://www.certvde.com/en/advisories/VDE-2026-079/","title":"VDE-2026-079 MB connect line mbCONNECT24/mymbCONNECT24","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":114195,"url":"https://www.certvde.com/en/advisories/VDE-2026-141/","title":"VDE-2026-141 Helmholz myREX24V2/myREX24V2.virtual","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}