MY
Product
mymbCONNECT24
52
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 23Medium 27Low 0
Watch
Add mymbCONNECT24 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32968 | 9.8 | Mar 23 | Unauthenticated RCE in com_mb24sysapi Affected: 0.0.0 through 2.19.3 |
| CVE-2026-33615 | 9.1 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint Affected: 0.0.0 through 2.19.4 |
| CVE-2026-33613 | 8.8 | Apr 2 | MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray Affected: 0.0.0 through 2.19.4 |
| CVE-2025-3090 | 8.2 | Jun 24 | MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24 Affected: before 2.18.0 |
| CVE-2026-40850 | 7.5 | May 27 | Unauthenticated SQLi in getAccountData function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40819 | 7.5 | May 27 | Unauthenticated SQLi in sync_data24 task Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40818 | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getDevice function function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40817 | 7.5 | May 27 | Unauthenticated SQLi in getAlarmProfiles function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40816 | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getTagAlarm function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40815 | 7.5 | May 27 | Unauthenticated SQLi in _mb24api_getUserAccount function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40814 | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getTagAlarm function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40813 | 7.5 | May 27 | Unauthenticated SQLi in getLiveValues Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40812 | 7.5 | May 27 | Unauthenticated SQLi in getLiveValues function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40811 | 7.5 | May 27 | Unauthenticated SQLi in ssoabstractservice Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40810 | 7.5 | May 27 | Unauthenticated SQLi in userinfo Endpoint Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-33616 | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint Affected: 0.0.0 through 2.19.4 |
| CVE-2026-33614 | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint Affected: 0.0.0 through 2.19.4 |
| CVE-2026-32969 | 7.5 | Mar 23 | Pre-Auth Blind SQLi in userinfo Endpoint Affected: 0.0.0 through 2.19.3 |
| CVE-2025-3092 | 7.5 | Jun 24 | MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24 Affected: before 2.18.0; before 2.18.0; before 2.16.5 |
| CVE-2025-3091 | 7.5 | Jun 24 | MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24 Affected: before 2.18.0; before 2.18.0; before 2.16.5 |
| CVE-2026-14448 | 7.2 | Jul 20 | Authenticated RCE in system_certificates view Affected: 1.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-10521 | 7.2 | Jun 23 | Authenticated unintended access to critical program parameters Affected: 0.0.0 before 2.20.2; 2.20.1 |
| CVE-2026-40836 | 7.1 | May 27 | Authenticated SQLi in inmessage model Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40834 | 7.1 | May 27 | Authenticated SQLi in saveDashboardLayout function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40833 | 7.1 | May 27 | Authenticated SQLi in saveDashboardLayout function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40849 | 6.5 | May 27 | Authenticated SQLi in user_alarmprofile view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40848 | 6.5 | May 27 | Authenticated SQLi in tag view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40847 | 6.5 | May 27 | Authenticated SQLi in system_tag view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40846 | 6.5 | May 27 | Authenticated SQLi in system view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40845 | 6.5 | May 27 | Authenticated SQLi in devices_configuration view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40844 | 6.5 | May 27 | Authenticated SQLi in dashboard view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40843 | 6.5 | May 27 | Authenticated SQLi in alarming view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40842 | 6.5 | May 27 | Authenticated SQLi in getWidgetTags function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40841 | 6.5 | May 27 | Authenticated SQLi in getProjectTags function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40840 | 6.5 | May 27 | Authenticated SQLi in VerifyCreateLicences function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40839 | 6.5 | May 27 | Authenticated SQLi in getComponentScalings function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40838 | 6.5 | May 27 | Authenticated SQLi in getDeviceScalings function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40837 | 6.5 | May 27 | Authenticated SQLi in getProjectScalings function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40835 | 6.5 | May 27 | Authenticated SQLi in saveObjectFromData function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40832 | 6.5 | May 27 | Authenticated SQLi in getDevicegroups function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40831 | 6.5 | May 27 | Authenticated SQLi in Easy View Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40830 | 5.5 | May 27 | Authenticated SQLi in UpdateParam function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40829 | 5.5 | May 27 | Authenticated SQLi in UpdateParam function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40828 | 5.5 | May 27 | Authenticated SQLi in DeleteSysLogEntry function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40827 | 5.5 | May 27 | Authenticated SQLi in _RemoveRequest function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40825 | 5.5 | May 27 | Authenticated SQLi in accountstatus view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40824 | 5.5 | May 27 | Authenticated SQLi in accountstatus view Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-40823 | 5.5 | May 27 | Authenticated SQLi in DevSerialReset function Affected: 0.0.0 through 2.20.0; 2.20.0 |
| CVE-2026-33617 | 5.3 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint Affected: 0.0.0 through 2.19.4 |
| CVE-2026-40826 | 4.9 | May 27 | Authenticated SQLi in dsgvo_contracts view Affected: 0.0.0 through 2.20.0; 2.20.0 |