cbcvebase.
CVE-2025-3092
published 2025-06-24

CVE-2025-3092: An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.

PriorityP350high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.41%
32.9th percentile
An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.

Affected

7 ranges
VendorProductVersion rangeFixed in
helmholzmyrex24< 2.18.02.18.0
helmholzmyrex24< 2.16.52.16.5
helmholzmyrex24.virtual< 2.18.02.18.0
helmholzmyrex24.virtual< 2.16.52.16.5
mb_connect_linembconnect24< 2.16.52.16.5
mb_connect_linemymbconnect24< 2.18.02.18.0
mb_connect_linemymbconnect24< 2.16.52.16.5
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.