MB
Product
mbCONNECT24
58
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 27Medium 29Low 0
Watch
Add mbCONNECT24 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40824 | 5.5 | May 27 | Authenticated SQLi in accountstatus view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40823 | 5.5 | May 27 | Authenticated SQLi in DevSerialReset function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-33617 | 5.3 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint Affected: 0.0.0 through 2.19.4 |
| CVE-2022-22520 | 5.3 | Sep 14 | User enumeration vulnerability in MB connect line and Helmholz products Affected: 2 through 2.11.2 |
| CVE-2026-40826 | 4.9 | May 27 | Authenticated SQLi in dsgvo_contracts view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40822 | 4.9 | May 27 | Authenticated SQLi in DevSerialReset function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40821 | 4.9 | May 27 | Authenticated SQLi in getAccountByID function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2023-1779 | 4.3 | Jun 6 | Helmholz and MB Connect Line: Account takeover via password reset in multiple products Affected: 1.0.0 through 2.13.3 |