Code Injection Vulnerability in Backup Restore Function for Affected Product by Vendor
CVE-2026-60039
8.6HIGH
What is CVE-2026-60039?
A significant vulnerability exists allowing a remote attacker with high privileges to execute code via the backup restore function of the affected product. By manipulating the function, unauthorized code can be injected, resulting in severe ramifications, including a complete compromise of the system’s confidentiality, integrity, and availability. This presents a critical security threat, making immediate awareness and remediation essential to protect sensitive data.
Affected Version(s)
mbCONNECT24 2.0.0 < 2.21.0
mymbCONNECT24 2.0.0 < 2.21.0
myREX24V2 2.0.0 < 2.21.0
