MB connect line mbCONNECT24 vulnerabilities

2 known vulnerabilities in MB connect line mbCONNECT24 from MB connect line. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MB connect line mbCONNECT24: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-32969Mar 23, 2026MB connect line

  An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confiden

• 9.8 Critical severity

  MB connect line mbCONNECT24: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-32968Mar 23, 2026MB connect line

  Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resulting in full system compromise. This vulnerability is a variant attack for CVE-