MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow RCE, SQLi or information leakage.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-33617US | — | — | ||
An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint expo… | ||||
| CVE-2026-33616US | — | — | ||
An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper neutralization of special elements in a… | ||||
| CVE-2026-33615US | — | — | ||
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UP… | ||||
| CVE-2026-33614US | — | — | ||
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutralization of special elements in a SQL SE… | ||||
| CVE-2026-33613US | high8.8 | — | ||
Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the generateSrpArray function, resulting in full… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Incident Management SIM#2026-03 - PDFself
- VDE-2026-030: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTMLself
- CERT@VDE Security Advisories for MB connect lineexternal
- Product security incident reportsexternal
- VDE-2026-030: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - CSAFself
Behebungen (5)
- Behoben
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.4.
- Behoben
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.
- Behoben
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.
- Behoben
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.
- Behoben
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan