Cross-Site Scripting Vulnerability in Backend System of Vendor Product
CVE-2026-60043

6.4MEDIUM

Key Information:

Vendor: Mb Connect Line
Status: Mbconnect24; Mymbconnect24; Myrex24v2; Myrex24v2.virtual
Vendor: CVE Published:; 10 November 2026

🔔 Create Mb Connect Line Vulnerability Alert

What is CVE-2026-60043?

A cross-site scripting (XSS) vulnerability allows an unauthenticated remote attacker to execute malicious scripts via the backend interface of the product. This exploitation could lead to unauthorized actions, such as shutting down the server or restoring malicious backups, posing risks to the integrity and availability of the system.

Affected Version(s)

mbCONNECT24 2.0.0 < 2.21.0

mymbCONNECT24 2.0.0 < 2.21.0

myREX24V2 2.0.0 < 2.21.0

References

https://www.certvde.com/en/advisories/VDE-2026-079/

https://www.certvde.com/en/advisories/VDE-2026-141/

CVSS V4

Score:

6.4

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Jul 8, 2026

Credit

SySS GmbH

CVE-2026-60043 Data

JSON