Denial of Service Vulnerability in Backup Creation Function of Software by CERT VDE
CVE-2026-60040

8.7HIGH

Key Information:

Vendor: Mb Connect Line
Status: Mbconnect24; Mymbconnect24; Myrex24v2; Myrex24v2.virtual
Vendor: CVE Published:; 10 November 2026

🔔 Create Mb Connect Line Vulnerability Alert

What is CVE-2026-60040?

An unauthenticated remote attacker can exploit a vulnerability in the backup creation function of CERT VDE's software, leading to a Denial of Service. This attack can severely disrupt the availability of the service, resulting in significant disruption and potential data loss for users relying on backup functionalities.

Affected Version(s)

mbCONNECT24 2.0.0 < 2.21.0

mymbCONNECT24 2.0.0 < 2.21.0

myREX24V2 2.0.0 < 2.21.0

References

https://www.certvde.com/en/advisories/VDE-2026-079/

https://www.certvde.com/en/advisories/VDE-2026-141/

CVSS V4

Score:

8.7

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Jul 8, 2026

Credit

SySS GmbH

CVE-2026-60040 Data

JSON