VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 21, 2025· Updated Nov 3, 2025

SQL Injection via POST Requests Allowing Configuration Database Manipulation

CVE-2025-41678

Description

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.

Affected products

2
  • Helmholz/REX 100v5
    Range: 0.0.0
  • MB connect line/mbNET.miniv5
    Range: 0.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.