MC
Vendor
MB connect line
126
CVEs
0
On KEV
0
New 30D
Products
MY9.8
mymbCONNECT24
MB connect line
54 CVEs0 on KEV0 new
MB9.1
mbCONNECT24
MB connect line
52 CVEs0 on KEV0 new
MB8.4
mbNET.mini
MB connect line
10 CVEs0 on KEV0 new
MB8.4
mbNET/mbNET.rokey
MB connect line
3 CVEs0 on KEV0 new
MC9.8
MB connect line mbCONNECT24
MB connect line
2 CVEs0 on KEV0 new
MB9.1
mbNET
MB connect line
2 CVEs0 on KEV0 new
MB9.1
mbNET.rokey
MB connect line
2 CVEs0 on KEV0 new
MH7.2
mbNET HW1
MB connect line
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-14448 | MY mymbCONNECT24 MB connect line | 7.2 | Jul 20 | Authenticated RCE in system_certificates view |
| CVE-2026-10521 | MY mymbCONNECT24 MB connect line | 7.2 | Jun 23 | Authenticated unintended access to critical program parameters |
| CVE-2026-40852 | MB mbNET.mini MB connect line | 7.2 | May 27 | Command injection via malicious configuration |
| CVE-2026-40851 | MB mbNET/mbNET.rokey MB connect line | 8.4 | May 27 | Command injection via USB |
| CVE-2026-40850 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in getAccountData function |
| CVE-2026-40849 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in user_alarmprofile view |
| CVE-2026-40848 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in tag view |
| CVE-2026-40847 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in system_tag view |
| CVE-2026-40846 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in system view |
| CVE-2026-40845 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in devices_configuration view |
| CVE-2026-40844 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in dashboard view |
| CVE-2026-40843 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in alarming view |
| CVE-2026-40842 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getWidgetTags function |
| CVE-2026-40841 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getProjectTags function |
| CVE-2026-40840 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in VerifyCreateLicences function |
| CVE-2026-40839 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getComponentScalings function |
| CVE-2026-40838 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getDeviceScalings function |
| CVE-2026-40837 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getProjectScalings function |
| CVE-2026-40836 | MB mbCONNECT24 MB connect line | 7.1 | May 27 | Authenticated SQLi in inmessage model |
| CVE-2026-40835 | MY mymbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in saveObjectFromData function |
| CVE-2026-40834 | MY mymbCONNECT24 MB connect line | 7.1 | May 27 | Authenticated SQLi in saveDashboardLayout function |
| CVE-2026-40833 | MY mymbCONNECT24 MB connect line | 7.1 | May 27 | Authenticated SQLi in saveDashboardLayout function |
| CVE-2026-40832 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in getDevicegroups function |
| CVE-2026-40831 | MB mbCONNECT24 MB connect line | 6.5 | May 27 | Authenticated SQLi in Easy View |
| CVE-2026-40830 | MY mymbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in UpdateParam function |
| CVE-2026-40829 | MY mymbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in UpdateParam function |
| CVE-2026-40828 | MY mymbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in DeleteSysLogEntry function |
| CVE-2026-40827 | MB mbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in _RemoveRequest function |
| CVE-2026-40826 | MY mymbCONNECT24 MB connect line | 4.9 | May 27 | Authenticated SQLi in dsgvo_contracts view |
| CVE-2026-40825 | MB mbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in accountstatus view |
| CVE-2026-40824 | MY mymbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in accountstatus view |
| CVE-2026-40823 | MB mbCONNECT24 MB connect line | 5.5 | May 27 | Authenticated SQLi in DevSerialReset function |
| CVE-2026-40822 | MB mbCONNECT24 MB connect line | 4.9 | May 27 | Authenticated SQLi in DevSerialReset function |
| CVE-2026-40821 | MB mbCONNECT24 MB connect line | 4.9 | May 27 | Authenticated SQLi in getAccountByID function |
| CVE-2026-40819 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in sync_data24 task |
| CVE-2026-40818 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getDevice function function |
| CVE-2026-40817 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in getAlarmProfiles function |
| CVE-2026-40816 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getTagAlarm function |
| CVE-2026-40815 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in _mb24api_getUserAccount function |
| CVE-2026-40814 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in _mb24confi_getTagAlarm function |
| CVE-2026-40813 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in getLiveValues |
| CVE-2026-40812 | MB mbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in getLiveValues function |
| CVE-2026-40811 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in ssoabstractservice |
| CVE-2026-40810 | MY mymbCONNECT24 MB connect line | 7.5 | May 27 | Unauthenticated SQLi in userinfo Endpoint |
| CVE-2026-33617 | MY mymbCONNECT24 MB connect line | 5.3 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint |
| CVE-2026-33616 | MY mymbCONNECT24 MB connect line | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint |
| CVE-2026-33615 | MY mymbCONNECT24 MB connect line | 9.1 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint |
| CVE-2026-33614 | MB mbCONNECT24 MB connect line | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint |
| CVE-2026-33613 | MB mbCONNECT24 MB connect line | 8.8 | Apr 2 | MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray |
| CVE-2026-32969 | MY mymbCONNECT24 MB connect line | 7.5 | Mar 23 | Pre-Auth Blind SQLi in userinfo Endpoint |
| CVE-2026-32968 | MC MB connect line mbCONNECT24 MB connect line | 9.8 | Mar 23 | Unauthenticated RCE in com_mb24sysapi |
| CVE-2025-41688 | MH mbNET HW1 MB connect line | 7.2 | Jul 31 | High Privilege RCE via LUA Sandbox Escape |
| CVE-2025-41681 | MB mbNET.mini MB connect line | 4.8 | Jul 21 | Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input |
| CVE-2025-41679 | MB mbNET.mini MB connect line | 7.5 | Jul 21 | Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service |
| CVE-2025-41678 | MB mbNET.mini MB connect line | 7.2 | Jul 21 | SQL Injection via POST Requests Allowing Configuration Database Manipulation |
| CVE-2025-41677 | MB mbNET.mini MB connect line | 4.9 | Jul 21 | Resource Exhaustion via POST Requests to send-mail Action |
| CVE-2025-41676 | MB mbNET.mini MB connect line | 4.9 | Jul 21 | Resource Exhaustion via POST Requests to send-sms Action |
| CVE-2025-41675 | MB mbNET.mini MB connect line | 7.2 | Jul 21 | Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization |
| CVE-2025-41674 | MB mbNET.mini MB connect line | 7.2 | Jul 21 | Remote Command Injection in diagnostic Action Due to Improper Input Neutralization |
| CVE-2025-41673 | MB mbNET.mini MB connect line | 7.2 | Jul 21 | Remote Command Injection in send_sms Action Due to Improper Input Neutralization |