CVE-2026-40852

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.certvde.com/en/advisories/VDE-2026-054/

Configurations

No configuration.

History

26 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Un atacante altamente autenticado puede alterar el generador de configuración inyectando una carga útil en futuras configuraciones creadas. El dispositivo no está verificando correctamente este valor de configuración antes de pasarlo a una ejecución del sistema, lo que lleva a la ejecución de código. Esto puede resultar en una pérdida total de confidencialidad, integridad y disponibilidad.

Information

Published : 2026-05-27 09:16

Updated : 2026-10-26 11:10

NVD link : CVE-2026-40852

Mitre link : CVE-2026-40852

CVE.ORG link : CVE-2026-40852

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-40852", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40852", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-27T11:44:33.329985Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "info@cert.vde.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "info@cert.vde.com", "affectedData": [{"vendor": "MB connect line", "product": "mbNET/mbNET.rokey", "versions": [{"status": "affected", "version": "0.0.0", "versionType": "semver", "lessThanOrEqual": "8.4.4"}], "defaultStatus": "unaffected"}, {"vendor": "MB connect line", "product": "mbNET.mini", "versions": [{"status": "affected", "version": "0.0.0", "versionType": "semver", "lessThanOrEqual": "3.0.2"}], "defaultStatus": "unaffected"}, {"vendor": "MB connect line", "product": "mbNET/mbNET.rokey", "versions": [{"status": "affected", "version": "8.4.4"}], "defaultStatus": "unaffected"}, {"vendor": "MB connect line", "product": "mbNET.mini", "versions": [{"status": "affected", "version": "3.0.2"}], "defaultStatus": "unaffected"}, {"vendor": "Helmholz", "product": "REX200/250", "versions": [{"status": "affected", "version": "0.0.0", "versionType": "semver", "lessThanOrEqual": "8.4.4"}], "defaultStatus": "unaffected"}, {"vendor": "Helmholz", "product": "REX100", "versions": [{"status": "affected", "version": "0.0.0", "versionType": "semver", "lessThanOrEqual": "3.0.2"}], "defaultStatus": "unaffected"}, {"vendor": "Helmholz", "product": "REX200/250", "versions": [{"status": "affected", "version": "8.4.4"}], "defaultStatus": "unaffected"}, {"vendor": "Helmholz", "product": "REX100", "versions": [{"status": "affected", "version": "3.0.2"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-27T09:16:31.817", "references": [{"url": "https://www.certvde.com/en/advisories/VDE-2026-054/", "source": "info@cert.vde.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "info@cert.vde.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability."}, {"lang": "es", "value": "Un atacante altamente autenticado puede alterar el generador de configuraci\u00f3n inyectando una carga \u00fatil en futuras configuraciones creadas. El dispositivo no est\u00e1 verificando correctamente este valor de configuraci\u00f3n antes de pasarlo a una ejecuci\u00f3n del sistema, lo que lleva a la ejecuci\u00f3n de c\u00f3digo. Esto puede resultar en una p\u00e9rdida total de confidencialidad, integridad y disponibilidad."}], "lastModified": "2026-10-26T11:10:00.157", "sourceIdentifier": "info@cert.vde.com"}