Weak Password Vulnerability in Backup Mechanism of Software by CERTVDE
CVE-2026-60044

8.7HIGH

Key Information:

Vendor: Mb Connect Line
Status: Mbconnect24; Mymbconnect24; Myrex24v2; Myrex24v2.virtual
Vendor: CVE Published:; 10 November 2026

🔔 Create Mb Connect Line Vulnerability Alert

What is CVE-2026-60044?

The CERTVDE Backup Software exhibits a critical vulnerability due to the use of a weak static password for backup files. This design flaw allows unauthenticated remote attackers to gain unauthorized access to sensitive backup content, leading to a significant loss of confidentiality. Organizations using this software are advised to take immediate action to secure their backups and mitigate the risk of exposure.

Affected Version(s)

mbCONNECT24 2.0.0 < 2.21.0

mymbCONNECT24 2.0.0 < 2.21.0

myREX24V2 2.0.0 < 2.21.0

References

https://www.certvde.com/en/advisories/VDE-2026-079/

https://www.certvde.com/en/advisories/VDE-2026-141/

CVSS V4

Score:

8.7

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Jul 8, 2026

Credit

SySS GmbH

CVE-2026-60044 Data

JSON