MC
Vendor
MB connect line
144
CVEs
0
On KEV
0
New 30D
Products
MY9.8
mymbCONNECT24
MB connect line
59 CVEs0 on KEV0 new
MB9.1
mbCONNECT24
MB connect line
57 CVEs0 on KEV0 new
MB9.8
mbNET.mini
MB connect line
15 CVEs0 on KEV0 new
MB8.4
mbNET/mbNET.rokey
MB connect line
4 CVEs0 on KEV0 new
MC9.8
MB connect line mbCONNECT24
MB connect line
2 CVEs0 on KEV0 new
MB9.1
mbNET
MB connect line
2 CVEs0 on KEV0 new
MH7.8
mbNET HW1
MB connect line
2 CVEs0 on KEV0 new
MB9.1
mbNET.rokey
MB connect line
2 CVEs0 on KEV0 new
MB7.8
mbSPIDER
MB connect line
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-14448 | MB mbCONNECT24 MB connect line | 7.2 | Jul 20 | Authenticated RCE in system_certificates view |
| CVE-2026-10521 | MB mbCONNECT24 MB connect line | 7.2 | Jun 23 | Authenticated unintended access to critical program parameters |
| CVE-2026-40852 | MB mbNET.mini MB connect line | 7.2 | May 27 | Command injection via malicious configuration |
| CVE-2026-40851 | MB mbNET/mbNET.rokey MB connect line | 8.4 | May 27 | Command injection via USB |
| CVE-2026-40850 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in getAccountData function |
| CVE-2026-40849 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in user_alarmprofile view |
| CVE-2026-40848 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in tag view |
| CVE-2026-40847 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in system_tag view |
| CVE-2026-40846 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in system view |
| CVE-2026-40845 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in devices_configuration view |
| CVE-2026-40844 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in dashboard view |
| CVE-2026-40843 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in alarming view |
| CVE-2026-40842 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getWidgetTags function |
| CVE-2026-40841 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getProjectTags function |
| CVE-2026-40840 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in VerifyCreateLicences function |
| CVE-2026-40839 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getComponentScalings function |
| CVE-2026-40838 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getDeviceScalings function |
| CVE-2026-40837 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getProjectScalings function |
| CVE-2026-40836 | MY mymbCONNECT24 MB connect line | 7.1 | May 27 | Authenticated SQLi in inmessage model |
| CVE-2026-40835 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in saveObjectFromData function |
| CVE-2026-40834 | MB mbCONNECT24 MB connect line | 7.1 | May 27 | Authenticated SQLi in saveDashboardLayout function |
| CVE-2026-40833 | MB mbCONNECT24 MB connect line | 7.1 | May 27 | Authenticated SQLi in saveDashboardLayout function |
| CVE-2026-40832 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getDevicegroups function |
| CVE-2026-40831 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in Easy View |
| CVE-2026-40830 | MB mbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in UpdateParam function |
| CVE-2026-40829 | MY mymbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in UpdateParam function |
| CVE-2026-40828 | MB mbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in DeleteSysLogEntry function |
| CVE-2026-40827 | MB mbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in _RemoveRequest function |
| CVE-2026-40826 | MB mbCONNECT24 MB connect line | 4.9 | May 27 | Authenticated SQLi in dsgvo_contracts view |
| CVE-2026-40825 | MY mymbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in accountstatus view |
| CVE-2026-40824 | MB mbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in accountstatus view |
| CVE-2026-40823 | MY mymbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in DevSerialReset function |
| CVE-2026-40822 | MB mbCONNECT24 MB connect line | 4.9 | May 27 | Authenticated SQLi in DevSerialReset function |
| CVE-2026-40821 | MY mymbCONNECT24 MB connect line | 4.9 | May 27 | Authenticated SQLi in getAccountByID function |
| CVE-2026-40819 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in sync_data24 task |
| CVE-2026-40818 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getDevice function function |
| CVE-2026-40817 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in getAlarmProfiles function |
| CVE-2026-40816 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getTagAlarm function |
| CVE-2026-40815 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in _mb24api_getUserAccount function |
| CVE-2026-40814 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getTagAlarm function |
| CVE-2026-40813 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in getLiveValues |
| CVE-2026-40812 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in getLiveValues function |
| CVE-2026-40811 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in ssoabstractservice |
| CVE-2026-40810 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in userinfo Endpoint |
| CVE-2026-33617 | MB mbCONNECT24 MB connect line | 5.3 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint |
| CVE-2026-33616 | MY mymbCONNECT24 MB connect line | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint |
| CVE-2026-33615 | MY mymbCONNECT24 MB connect line | 9.1 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint |
| CVE-2026-33614 | MY mymbCONNECT24 MB connect line | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint |
| CVE-2026-33613 | MY mymbCONNECT24 MB connect line | 8.8 | Apr 2 | MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray |
| CVE-2026-32969 | MY mymbCONNECT24 MB connect line | 7.5 | Mar 23 | Pre-Auth Blind SQLi in userinfo Endpoint |
| CVE-2026-32968 | MC MB connect line mbCONNECT24 MB connect line | 9.8 | Mar 23 | Unauthenticated RCE in com_mb24sysapi |
| CVE-2025-41688 | MB mbNET/mbNET.rokey MB connect line | 7.2 | Jul 31 | High Privilege RCE via LUA Sandbox Escape |
| CVE-2025-41681 | MB mbNET.mini MB connect line | 4.8 | Jul 21 | Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input |
| CVE-2025-41679 | MB mbNET.mini MB connect line | 7.5 | Jul 21 | Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service |
| CVE-2025-41678 | MB mbNET.mini MB connect line | 7.2 | Jul 21 | SQL Injection via POST Requests Allowing Configuration Database Manipulation |
| CVE-2025-41677 | MB mbNET.mini MB connect line | 4.9 | Jul 21 | Resource Exhaustion via POST Requests to send-mail Action |
| CVE-2025-41676 | MB mbNET.mini MB connect line | 4.9 | Jul 21 | Resource Exhaustion via POST Requests to send-sms Action |
| CVE-2025-41675 | MB mbNET.mini MB connect line | 7.2 | Jul 21 | Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization |
| CVE-2025-41674 | MB mbNET.mini MB connect line | 7.2 | Jul 21 | Remote Command Injection in diagnostic Action Due to Improper Input Neutralization |
| CVE-2025-41673 | MB mbNET.mini MB connect line | 7.2 | Jul 21 | Remote Command Injection in send_sms Action Due to Improper Input Neutralization |