Is CVE-2026-60042 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-60042 being exploited in the wild.

How severe is CVE-2026-60042?

Medium severity, with a CVSS score of 5.3, published 10 November 2026.

Which products and versions are affected?

Helmholz myREX24V2 firmware < 2.21.0; Helmholz myREX24V2.virtual firmware < 2.21.0.

Is there a fix for CVE-2026-60042?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-60042 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-60042?

Check whether you run Helmholz myREX24V2 or Helmholz myREX24V2.virtual at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-60042: Helmholz myREX24V2 authentication bypass in com_check

Q: Is there a fix for CVE-2026-60042?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-60042 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2026-60042?

Check whether you run Helmholz myREX24V2 or Helmholz myREX24V2.virtual at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-60042 · Severity: medium · CVSS 5.3 · Published 2026-11-10

Helmholz myREX24V2 is an industrial controller used in automation systems. An unauthenticated attacker can bypass authentication on a backend function to trigger unwanted traffic and alerts, potentially overloading the system and degrading service availability for legitimate users.

Technologies: Helmholz myREX24V2, Helmholz myREX24V2.virtual. Vendors: Helmholz.

Quick answers

Is CVE-2026-60042 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-60042 being exploited in the wild.
How severe is CVE-2026-60042?: Medium severity, with a CVSS score of 5.3, published 10 November 2026.
Which products and versions are affected?: Helmholz myREX24V2 firmware < 2.21.0; Helmholz myREX24V2.virtual firmware < 2.21.0.
Is there a fix for CVE-2026-60042?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-60042 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-60042?: Check whether you run Helmholz myREX24V2 or Helmholz myREX24V2.virtual at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

CVE-2026-60042 is an authorization bypass in the com_check function allowing an unauthenticated remote attacker to trigger traffic and system alerts. The vulnerability requires no authentication, no user interaction, and can be exploited over the network. Exploitation results in degraded availability through increased system load.

Affected products

Helmholz myREX24V2 firmware < 2.21.0
Helmholz myREX24V2.virtual firmware < 2.21.0

Timeline

2026-11-10: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.