MB Connect Line mbCONNECT24

• CVE-2026-14448 High 7.2 Authenticated RCE in system_certificates view 0.9%
• CVE-2026-10521 High 7.2 Authenticated unintended access to critical program parameters 0.6%
• CVE-2026-40850 High 7.5 Unauthenticated SQLi in getAccountData function 0.4%
• CVE-2026-40849 Medium 6.5 Authenticated SQLi in user_alarmprofile view 0.3%
• CVE-2026-40848 Medium 6.5 Authenticated SQLi in tag view 0.3%
• CVE-2026-40847 Medium 6.5 Authenticated SQLi in system_tag view 0.3%
• CVE-2026-40846 Medium 6.5 Authenticated SQLi in system view 0.3%
• CVE-2026-40845 Medium 6.5 Authenticated SQLi in devices_configuration view 0.3%
• CVE-2026-40844 Medium 6.5 Authenticated SQLi in dashboard view 0.3%
• CVE-2026-40843 Medium 6.5 Authenticated SQLi in alarming view 0.3%
• CVE-2026-40842 Medium 6.5 Authenticated SQLi in getWidgetTags function 0.3%
• CVE-2026-40841 Medium 6.5 Authenticated SQLi in getProjectTags function 0.3%
• CVE-2026-40840 Medium 6.5 Authenticated SQLi in VerifyCreateLicences function 0.3%
• CVE-2026-40839 Medium 6.5 Authenticated SQLi in getComponentScalings function 0.3%
• CVE-2026-40838 Medium 6.5 Authenticated SQLi in getDeviceScalings function 0.3%
• CVE-2026-40837 Medium 6.5 Authenticated SQLi in getProjectScalings function 0.3%
• CVE-2026-40836 High 7.1 Authenticated SQLi in inmessage model 0.2%
• CVE-2026-40835 Medium 6.5 Authenticated SQLi in saveObjectFromData function 0.3%
• CVE-2026-40834 High 7.1 Authenticated SQLi in saveDashboardLayout function 0.2%
• CVE-2026-40833 High 7.1 Authenticated SQLi in saveDashboardLayout function 0.2%
• CVE-2026-40832 Medium 6.5 Authenticated SQLi in getDevicegroups function 0.3%
• CVE-2026-40831 Medium 6.5 Authenticated SQLi in Easy View 0.3%
• CVE-2026-40830 Medium 5.5 Authenticated SQLi in UpdateParam function 0.3%
• CVE-2026-40829 Medium 5.5 Authenticated SQLi in UpdateParam function 0.3%
• CVE-2026-40828 Medium 5.5 Authenticated SQLi in DeleteSysLogEntry function 0.3%
• CVE-2026-40827 Medium 5.5 Authenticated SQLi in _RemoveRequest function 0.3%
• CVE-2026-40826 Medium 4.9 Authenticated SQLi in dsgvo_contracts view 0.3%
• CVE-2026-40825 Medium 5.5 Authenticated SQLi in accountstatus view 0.2%
• CVE-2026-40824 Medium 5.5 Authenticated SQLi in accountstatus view 0.2%
• CVE-2026-40823 Medium 5.5 Authenticated SQLi in DevSerialReset function 0.2%
• CVE-2026-40822 Medium 4.9 Authenticated SQLi in DevSerialReset function 0.3%
• CVE-2026-40821 Medium 4.9 Authenticated SQLi in getAccountByID function 0.3%
• CVE-2026-40819 High 7.5 Unauthenticated SQLi in sync_data24 task 0.3%
• CVE-2026-40818 High 7.5 Unauthenticated SQLi in _mb24confi_getDevice function function 0.3%
• CVE-2026-40817 High 7.5 Unauthenticated SQLi in getAlarmProfiles function 0.3%
• CVE-2026-40816 High 7.5 Unauthenticated SQLi in _mb24confi_getTagAlarm function 0.3%
• CVE-2026-40815 High 7.5 Unauthenticated SQLi in _mb24api_getUserAccount function 0.3%
• CVE-2026-40814 High 7.5 Unauthenticated SQLi in _mb24confi_getTagAlarm function 0.3%
• CVE-2026-40813 High 7.5 Unauthenticated SQLi in getLiveValues 0.3%
• CVE-2026-40812 High 7.5 Unauthenticated SQLi in getLiveValues function 0.3%
• CVE-2026-40811 High 7.5 Unauthenticated SQLi in ssoabstractservice 0.3%
• CVE-2026-40810 High 7.5 Unauthenticated SQLi in userinfo Endpoint 0.3%
• CVE-2026-33617 Medium 5.3 MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint 0.3%
• CVE-2026-33616 High 7.5 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint 0.3%
• CVE-2026-33615 Critical 9.1 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint 0.4%
• CVE-2026-33614 High 7.5 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint 0.3%
• CVE-2026-33613 High 7.2 MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray 0.5%
• CVE-2025-3092 High 7.5 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24 0.5%
• CVE-2025-3091 High 7.5 MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24 0.4%
• CVE-2025-3090 High 8.2 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24 0.5%