Code Injection Vulnerability in Backend Network Authentication Function by Vendor
CVE-2026-60035
8.6HIGH
What is CVE-2026-60035?
This vulnerability allows a remote attacker with elevated privileges to exploit a code injection flaw in the backend network authentication function. By manipulating the system, the attacker can execute arbitrary code, potentially leading to a complete compromise of the system’s confidentiality, integrity, and availability. Organizations utilizing affected products must prioritize remedial measures to mitigate the risk associated with this vulnerability.
Affected Version(s)
mbCONNECT24 2.0.0 < 2.21.0
mymbCONNECT24 2.0.0 < 2.21.0
myREX24V2 2.0.0 < 2.21.0
