EUVD-2026-32158

🗓️ 27 May 2026 07:53:55Reported by EUVDType

High privileged remote attacker can exploit unauthenticated SQL Injection in view.html.php UpdateParam, risking full database read and data modification.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-40829	27 May 202607:53	–	attackerkb
Circl	CVE-2026-40829	27 May 202608:11	–	circl
CNNVD	MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-40829	27 May 202607:53	–	cve
Cvelist	CVE-2026-40829 Authenticated SQLi in UpdateParam function	27 May 202607:53	–	cvelist
NVD	CVE-2026-40829	27 May 202609:16	–	nvd
Positive Technologies	PT-2026-43595	27 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-40829	5 Jun 202619:13	–	redhatcve
Vulnrichment	CVE-2026-40829 Authenticated SQLi in UpdateParam function	27 May 202607:53	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "1f079b93-75dc-3af1-9290-50b38a8c521b",
        "vendor": {
          "name": "Helmholz"
        }
      },
      {
        "id": "45e3f23e-7bfc-3def-a173-621b843e2a2f",
        "vendor": {
          "name": "MB connect line"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "102982f8-ed3f-3180-81e5-bf691b968ee4",
        "product": {
          "name": "myREX24V2",
          "vendor": {
            "name": "Helmholz"
          }
        },
        "product_version": "0.0.0 ≤2.20.0"
      },
      {
        "id": "16acede6-2f94-37f8-9a06-eb3e1e756038",
        "product": {
          "name": "mbCONNECT24",
          "vendor": {
            "name": "MB connect line"
          }
        },
        "product_version": "2.20.0"
      },
      {
        "id": "23e72cc8-5539-36c9-90cb-8717b23c2af7",
        "product": {
          "name": "mymbCONNECT24",
          "vendor": {
            "name": "MB connect line"
          }
        },
        "product_version": "0.0.0 ≤2.20.0"
      },
      {
        "id": "2d0bdc01-e92c-3f83-bdcd-4635ea30028d",
        "product": {
          "name": "mymbCONNECT24",
          "vendor": {
            "name": "MB connect line"
          }
        },
        "product_version": "2.20.0"
      },
      {
        "id": "58a05192-99f1-37be-a65c-50d1ecbd475f",
        "product": {
          "name": "myREX24V2",
          "vendor": {
            "name": "Helmholz"
          }
        },
        "product_version": "2.20.0"
      },
      {
        "id": "68c61b6a-4760-3532-a750-8c776fc4ef66",
        "product": {
          "name": "mbCONNECT24",
          "vendor": {
            "name": "MB connect line"
          }
        },
        "product_version": "0.0.0 ≤2.20.0"
      },
      {
        "id": "ba3841e0-4104-3d5c-bbb1-657164b2c3a9",
        "product": {
          "name": "myREX24V2.virtual",
          "vendor": {
            "name": "Helmholz"
          }
        },
        "product_version": "2.20.0"
      },
      {
        "id": "e7242d5a-541d-3c9b-bd6f-9c96b952e6c9",
        "product": {
          "name": "myREX24V2.virtual",
          "vendor": {
            "name": "Helmholz"
          }
        },
        "product_version": "0.0.0 ≤2.20.0"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/en/advisories/VDE-2026-044/

27 May 2026 11:59Current

6Medium risk

Vulners AI Score6

CVSS 47

CVSS 3.15.5

EPSS0.00043

SSVC