Home / Vulnerability Intelligence / CVE-2026-32968

CVE-2026-32968 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: March 23, 2026

com_mb24sysapi - Remote Code Execution

Published: March 23, 2026Updated: March 23, 2026Remote Exploitable

Overview

com_mb24sysapi contains a remote code execution caused by improper neutralisation of special elements in OS commands, letting unauthenticated remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 11.2%(Probability of exploitation in next 30 days)

Impact

Unauthenticated remote attackers can execute arbitrary code, leading to full system compromise.

Mitigation

Update to the latest version.

References

Social Media Activity(3 posts)

TheHackerWire

@thehackerwire

Mar 23, 2026

🔴 CVE-2026-32968 - Critical (9.8) Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resulting in full system compromise. This vulnerability is a variant at... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32968/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

CERT@VDE

@certvde

Mar 23, 2026

#OT #Advisory VDE-2026-025 Helmholz: Multiple Vulnerabilities in myREX24V2 / myREX24V2.virtual Multiple vulnerabilities have been discovered in Helmholz myREX24V2 / myREX24V2.virtual that could allow unauthenticated RCE or SQLi. #CVE CVE-2026-32968, CVE-2026-32969 https://certvde.com/en/advisories/vde-2026-025/ #CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-025.json

View original post

CERT@VDE

@certvde

Mar 23, 2026

#OT #Advisory VDE-2026-024 MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow unauthenticated RCE or SQLi. #CVE CVE-2026-32968, CVE-2026-32969 https://certvde.com/en/advisories/vde-2026-024/ #CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-024.json

View original post

Related Resources

Details

CVE ID: CVE-2026-32968
Severity: Critical
CVSS Score: 9.8
Type: command_injection
Status: unconfirmed
EPSS: 11.2%
Social Posts: 3

CWE

CWE-78

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

11.2%Probability of exploitation in the next 30 days