CVE Almanac
← All CVEs

CVE-2026-40851

HIGH 8.4

Published 2026-05-27 · Last modified 2026-05-27

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

ELEVATED IMPACT

Severe if exploited (CVSS 8.4), but no known exploitation and low modeled probability. Patch on a normal cadence.

Exploitation likelihood

0.1%chance of exploitation in 30 days · 3rd percentile

○ In CISA KEV ○ Public exploit / PoC

Impact if exploited

8.4CVSS 3.1 · HIGH

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ⚠Access: Requires local access to the host
  • ✓Privileges: No account or privileges required
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Affected

Vendors Mb Connect Line Helmholz

Products Mbnet/Mbnet.Rokey Mbnet.Mini Rex200/250 Rex100

Weakness (CWE)

  • CWE-1287

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Technical & other

Sources: NVD · CVE.org · EPSS