MY
Product
mymbCONNECT24
62
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 29Medium 30Low 0
Watch
Add mymbCONNECT24 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40828 | 5.5 | May 27 | Authenticated SQLi in DeleteSysLogEntry function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40827 | 5.5 | May 27 | Authenticated SQLi in _RemoveRequest function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40825 | 5.5 | May 27 | Authenticated SQLi in accountstatus view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40824 | 5.5 | May 27 | Authenticated SQLi in accountstatus view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40823 | 5.5 | May 27 | Authenticated SQLi in DevSerialReset function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-33617 | 5.3 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint Affected: 0.0.0 through 2.19.4 |
| CVE-2022-22520 | 5.3 | Sep 14 | User enumeration vulnerability in MB connect line and Helmholz products Affected: 2 through 2.11.2 |
| CVE-2026-40826 | 4.9 | May 27 | Authenticated SQLi in dsgvo_contracts view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40822 | 4.9 | May 27 | Authenticated SQLi in DevSerialReset function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40821 | 4.9 | May 27 | Authenticated SQLi in getAccountByID function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2023-1779 | 4.3 | Jun 6 | Helmholz and MB Connect Line: Account takeover via password reset in multiple products Affected: 1.0.0 through 2.13.3 |
| CVE-2021-34574 | 4.3 | Aug 2 | Password policy evasion in products of MB connect line and Helmholz Affected: 2 through 2.11.2 |