CVE-2025-3092

creationtimestamp| type| source ---|---|--- 2025-06-24 08:15:45+00:00| seen| https://infosec.exchange/users/certvde/statuses/114737345025910183 2025-06-24 08:16:22+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lsdnsfqipjb2 2025-06-24 08:16:51+00:00| seen|...

CVE-2025-3092 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24

An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint...

CVE-2025-3092

CVE-2025-3092: An unauthenticated remote attacker can enumerate valid usernames through an unprotected endpoint. Connected advisories tie this to MB Connect Line mbCONNECT24 and mymbCONNECT24 (and Helmholz myREX24 in related feeds). Reported CVSSv3.1 base metrics indicate a NETWORK, LOW attack co...

CVE-2025-3092 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24

An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint...