Bridge or Backdoor? Critical 9.8 RCE Flaw Threatens Helmholz Industrial Networks

**Helmholz advisory:** Helmholz myREX24V2 and myREX24V2.virtual remote access gateways contain two serious pre-auth vulnerabilities—CVE-2026-32968 (RCE, CVSS 9.8) in the com_mb24sysapi module and CVE-2026-32969 (blind SQLi, CVSS 7.5) in the userinfo endpoint—affecting firmware versions 2.19.3 and earlier; administrators are urged to apply the released firmware updates immediately to prevent full system compromise and database disclosure.