CVE-2025-3090: Helmholz MYREX24

High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function.

Affected products

• Helmholz MYREX24: before 2.18.0 (fixed in 2.18.0)
• Helmholz MYREX24.VIRTUAL: before 2.18.0 (fixed in 2.18.0)
• Mb Connect Line MBCONNECT24: before 2.18.0 (fixed in 2.18.0)
• Mb Connect Line MYMBCONNECT24: before 2.18.0 (fixed in 2.18.0)

Published 2025-06-24. Last modified 2026-06-17.