Login Request a demo
MB
Product
Mbconnect24
by Mbconnectline · last CVE Apr 2, 2026
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities38In the news0Timeline
Severity mix
Critical 3High 14Medium 21Low 0
Severity
All severities38Critical3High14Medium21Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mbconnect24 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33613
8.8
0%
Apr 2
MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray
Affected: through 2.19.4
CVE-2023-0985
8.8
1%
Jun 6
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote…
Affected: through 2.13.3
CVE-2020-10382
8.8
2%
Apr 14
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0
Affected: through 2.5.0
CVE-2024-45273
7.8
0%
Oct 15
MB connect line/Helmholz: Weak encryption of configuration file
Affected: before 2.16.3
CVE-2020-35567
7.8
0%
Feb 16
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2
Affected: through 2.6.2
CVE-2020-10384
7.8
0%
Apr 14
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1
Affected: through 2.6.1
CVE-2020-12528
7.7
1%
Mar 2
An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2
Affected: through 2.6.2
CVE-2026-33616
7.5
0%
Apr 2
MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint
Affected: through 2.19.4
CVE-2026-33614
7.5
0%
Apr 2
MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint
Affected: through 2.19.4
CVE-2024-45272
7.5
1%
Oct 15
MB connect line/Helmholz: Generation of weak passwords vulnerability
Affected: before 2.16.3
CVE-2021-34580
7.5
1%
Oct 27
In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login…
Affected: through 2.9.0
CVE-2021-34575
7.5
1%
Aug 2
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends
Affected: through 2.8.0
CVE-2020-35564
7.5
1%
Feb 16
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2
Affected: through 2.6.2
CVE-2020-35558
7.5
1%
Feb 16
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2
Affected: through 2.11.2
Showing 14