File Upload Vulnerability in Affected Product by Vendor
CVE-2026-60045

6.9MEDIUM

Key Information:

Vendor
CVE Published:
10 November 2026

What is CVE-2026-60045?

A remote attacker with elevated privileges can exploit this vulnerability to upload arbitrary files to a location that can be guessed. This capability poses a significant risk as it may lead to a disruption of service and can be potentially exploited in conjunction with other vulnerabilities to compound the threat. Organizations using the affected products should take immediate action to mitigate this risk.

Affected Version(s)

mbCONNECT24 2.0.0 < 2.21.0

mymbCONNECT24 2.0.0 < 2.21.0

myREX24V2 2.0.0 < 2.21.0

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SySS GmbH
.