# CVE-2026-60042: Helmholz myREX24V2 authentication bypass in com_check

Source: https://junglewise.ai/threats/cve-2026-60042-an-unauthenticated-remote-attacker-can-perform-an-authentication  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-60042 · Severity: medium · CVSS 5.3 · Published 2026-11-10

Helmholz myREX24V2 is an industrial controller used in automation systems. An unauthenticated attacker can bypass authentication on a backend function to trigger unwanted traffic and alerts, potentially overloading the system and degrading service availability for legitimate users.

Technologies: [Helmholz myREX24V2](https://junglewise.ai/threats/technologies/myrex24v2), [Helmholz myREX24V2.virtual](https://junglewise.ai/threats/technologies/myrex24v2-virtual). Vendors: [Helmholz](https://junglewise.ai/threats/vendors/helmholz).

## Quick answers

**Is CVE-2026-60042 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-60042 being exploited in the wild.

**How severe is CVE-2026-60042?** Medium severity, with a CVSS score of 5.3, published 10 November 2026.

**Which products and versions are affected?** Helmholz myREX24V2 firmware < 2.21.0; Helmholz myREX24V2.virtual firmware < 2.21.0.

**Is there a fix for CVE-2026-60042?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-60042 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-60042?** Check whether you run Helmholz myREX24V2 or Helmholz myREX24V2.virtual at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

CVE-2026-60042 is an authorization bypass in the com_check function allowing an unauthenticated remote attacker to trigger traffic and system alerts. The vulnerability requires no authentication, no user interaction, and can be exploited over the network. Exploitation results in degraded availability through increased system load.

## Affected products

- Helmholz myREX24V2 firmware < 2.21.0
- Helmholz myREX24V2.virtual firmware < 2.21.0

## Timeline

- 2026-11-10: disclosed

## References

- [https://www.certvde.com/en/advisories/VDE-2026-079/](https://www.certvde.com/en/advisories/VDE-2026-079/)
- [https://www.certvde.com/en/advisories/VDE-2026-141/](https://www.certvde.com/en/advisories/VDE-2026-141/)

## Related threats

- [Helmholz myREX24V2 unauthenticated password reset DoS](https://junglewise.ai/threats/cve-2026-60046-an-unauthenticated-remote-attacker-can-perform-password-resets)
- [Helmholz myREX24V2 arbitrary file upload to guessable location](https://junglewise.ai/threats/cve-2026-60045-a-high-privileged-remote-attacker-can-upload-arbitrary-files-to-a)
- [Helmholz myREX24V2 cross-site scripting in backend](https://junglewise.ai/threats/cve-2026-60043-an-unauthenticated-remote-attacker-can-perform-a-xss-attack-on-a)
- [Helmholz myREX24V2 CSRF attack on backend user](https://junglewise.ai/threats/cve-2026-60041-an-unauthenticated-remote-attacker-can-perform-a-csrf-attack-on-a)
- [Helmholz myREX24V2 OS command injection in backup restore](https://junglewise.ai/threats/cve-2026-60039-a-high-privileged-remote-attacker-can-perform-a-code-injection-in)