Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Helmholz
Rex 100

Helmholz REX 100 Vulnerabilities: CVEs, CISA KEV & Security Advisories

14 CVEs

Helmholz REX 100 Vulnerabilities

CVE security advisories and vulnerability history for REX 100 by Helmholz.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

With known exploit

7.1

Avg CVSS

2024–2025

Last updated July 21, 2025

Overview

Helmholz REX 100 has 14 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Helmholz REX 100, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Helmholz REX 100's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High7

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Helmholz REX 100's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Helmholz REX 100's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Helmholz REX 100 version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

2.3.38 CVEs
> 2.2.111 CVE

Find a version

14 CVEs

Sort

Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input
CVE-2025-41681
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.2% (36th pct)2025-07-21
Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service
CVE-2025-41679
Patch
CWE-787
Medium · CVSS 5.3
EPSS 0.5% (68th pct)2025-07-21
SQL Injection via POST Requests Allowing Configuration Database Manipulation
CVE-2025-41678
Patch
CWE-89
Medium · CVSS 6.5
EPSS 0.7% (72th pct)2025-07-21
Resource Exhaustion via POST Requests to send-mail Action
CVE-2025-41677
Patch
CWE-400
Medium · CVSS 4.9
EPSS 0.7% (72th pct)2025-07-21
Resource Exhaustion via POST Requests to send-sms Action
CVE-2025-41676
Patch
CWE-400
Medium · CVSS 4.9
EPSS 0.7% (72th pct)2025-07-21
Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization
CVE-2025-41675
Patch
CWE-78
High · CVSS 7.2
EPSS 0.7% (72th pct)2025-07-21
Remote Command Injection in diagnostic Action Due to Improper Input Neutralization
CVE-2025-41674
Patch
CWE-78
High · CVSS 7.2
EPSS 0.7% (72th pct)2025-07-21
Remote Command Injection in send_sms Action Due to Improper Input Neutralization
CVE-2025-41673
Patch
CWE-78
High · CVSS 7.2
EPSS 0.7% (72th pct)2025-07-21
High vulnerability · 2024-10-15
CVE-2024-45276
Patch
CWE-306
High · CVSS 7.5
EPSS 0.5% (66th pct)2024-10-15
Critical vulnerability · 2024-10-15
CVE-2024-45275
Patch
CWE-798
Critical · CVSS 9.8
EPSS 3.4% (88th pct)2024-10-15
MB connect line/Helmholz: Remote code execution via confnet service
CVE-2024-45274
Patch
CWE-306
Critical · CVSS 9.8
EPSS 3.6% (88th pct)2024-10-15
High vulnerability · 2024-10-15
CVE-2024-45273
Patch
CWE-261
High · CVSS 8.4
EPSS 0.1% (25th pct)2024-10-15
MB connect line/Helmholz: Remote code execution due to improper input validation
CVE-2024-45271
Patch
CWE-94
High · CVSS 8.4
EPSS 0.1% (33th pct)2024-10-15
High vulnerability · 2024-07-03
CVE-2024-5672
Public exploit
Patch
CWE-78
High · CVSS 7.2
EPSS 0.7% (73th pct)2024-07-03

Common weakness types

The CWE weakness categories most often found in Helmholz REX 100 CVEs. Follow any weakness for its full explanation.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-798Use of Hard-coded Credentials1 CVE
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1 CVE
CWE-261Weak Encoding for Password1 CVE
CWE-94Improper Control of Generation of Code ('Code Injection')1 CVE
CWE-787Out-of-bounds Write1 CVE

Disclosure activity by year

How many Helmholz REX 100 CVEs were published each year.

2024

6

2025

8

Other Helmholz products

Browse vulnerabilities for other products by Helmholz.

myREX24V242 CVEs myREX24V2.virtual42 CVEs myREX24.virtual17 CVEs myREX2415 CVEs REX1007 CVEs rex 100 firmware5 CVEs rex_100_firmware4 CVEs rex 2003 CVEs

All Helmholz vulnerabilities

Frequently asked questions

Common questions about Helmholz REX 100 vulnerabilities.

How many CVEs does Helmholz REX 100 have?

Helmholz REX 100 has 14 published CVE records since 2024.

How many Helmholz REX 100 CVEs are in CISA KEV?

None of Helmholz REX 100's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Helmholz REX 100 vulnerabilities?

Yes — 1 of Helmholz REX 100's CVEs have a known public exploit.

Which versions of Helmholz REX 100 are affected?

2 distinct Helmholz REX 100 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Helmholz REX 100 CVEs?

Helmholz REX 100's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-306 (Missing Authentication for Critical Function), CWE-400 (Uncontrolled Resource Consumption), CWE-798 (Use of Hard-coded Credentials).

How many critical Helmholz REX 100 vulnerabilities are there?

Helmholz REX 100 has 2 critical and 7 high-severity CVEs.

What is the average severity of Helmholz REX 100 CVEs?

The average CVSS base score across Helmholz REX 100's scored CVEs is 7.1.

References

All Helmholz vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Helmholz REX 100 vulnerabilities

Monitor new Helmholz REX 100 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References