MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
Advisory ansehen veröffentlicht 2026-03-23
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow unauthenticated RCE or SQLi.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-32969US | — | — | ||
An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutralization of speci… | ||||
| CVE-2026-32968US | — | — | ||
Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resu… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Incident Management SIM#2026-02 - PDFself
- VDE-2026-024: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTMLself
- CERT@VDE Security Advisories for MB connect lineexternal
- Product security incident reportsexternal
- VDE-2026-024: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - CSAFself
03
Behebungen (2)
- Behoben
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.4.
- Behoben
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.4.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan