CVE-2026-40845

Authenticated SQLi in devices_configuration view

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuration view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more

CVE-2026-42748

WordPress WPify Woo Czech plugin <= 5.4.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.1.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed

Vendors

Wordpress Wpify

Products

Wordpress Woo Czech

CVE-2026-44983

smallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow

smallbitvec is a growable bit-vector for Rust, optimized for size. From 1.0.1 to 2.6.0, an integer overflow in the internal capacity calculation of smallbitvec can lead to an undersized heap allocation, resulting in a heap buffer overflow through safe APIs only. This allows memory corruption without requiring unsafe code from the caller. This vulnerability is fixed in 2.6.1.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Servo

Products

Smallvec

CVE-2026-40849

Authenticated SQLi in user_alarmprofile view

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more

CVE-2026-40852

Command injection via malicious configuration

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Rex100 Rex200 250 Mbnet and 2 more

CVE-2026-40383

Joomla! Core - [20260509] - LFI in HTMLView layout parameter

An improper validation of user-supplied input leads to a local file inclusion vulnerability.

CVSS 4.0 · 7.5 High EPSS 12.5% KEV · Not listed

Vendors

Joomla

Products

Joomla! Joomla\!

CVE-2026-23663

Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Global Secure Access

CVE-2025-41670

Untrusted Search Path

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Phoenix Contact

Products

Axc F 1152 Axc F 1252 Axc F 2000 Ea and 11 more

CVE-2026-40822

Authenticated SQLi in DevSerialReset function

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more

CVE-2026-40827

Authenticated SQLi in _RemoveRequest function

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _RemoveRequest function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more

CVE-2026-40844

Authenticated SQLi in dashboard view

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more

CVE-2026-42740

WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows Blind SQL Injection.This issue affects Tainacan: from n/a through <= 1.0.3.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Tainacan Wordpress

Products

Tainacan Wordpress

CVE-2026-42901

Microsoft Entra ID Elevation of Privilege Vulnerability

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Entra Id Microsoft Entra Id

CVE-2025-41669

Insufficient Verification of Data Authenticity

The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing any data verification mechanism, leading to the capability for an Engineer user to reach arbitrary code execution with root privileges on the PLC device. A successful exploitation may allow to install a manipulated APP package, potentially impacting integrity and availability of the PLCnext Control.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Phoenix Contact

Products

Axc F 1152 Axc F 1252 Axc F 2000 Ea and 11 more

CVE-2026-40810

Unauthenticated SQLi in userinfo Endpoint

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more

CVE-2026-40811

Unauthenticated SQLi in ssoabstractservice

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Myrex24.virtual Myrex24 V2 Myrex24v2 and 6 more

CVE-2026-40812

Unauthenticated SQLi in getLiveValues function

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions sn parameter due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Myrex24.virtual Myrex24 V2 Myrex24v2 and 6 more

CVE-2026-40814

Unauthenticated SQLi in _mb24confi_getTagAlarm function

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _mb24confi_getTagAlarm function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more

CVE-2026-40815

Unauthenticated SQLi in _mb24api_getUserAccount function

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAccount function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more

CVE-2026-40816

Unauthenticated SQLi in _mb24confi_getTagAlarm function

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files _mb24confi_getTagAlarm function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line

Products

Myrex24v2 Myrex24v2.virtual Myrex24v2virtual and 2 more