PT-2026-43617 · Helmholz+1 · Rex100+3

Christian Zäske

+1

·

Published

2026-05-27

·

Updated

2026-05-27

·

CVE-2026-40851

CVSS v3.1

8.4

High

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-40851

Affected Products

Rex100
Rex 200/250
Mbnet.Mini
Mbnet/Mbnet.Rokey