Product by Mb Connect Line
Mbconnect24
64 known vulnerabilities in Mbconnect24 (Mb Connect Line), 0 of them actively exploited (CISA KEV).
Key figures
64
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-14448 | Authenticated RCE in system_certificates view | 7.2 | |
| High | CVE-2026-10521 | Authenticated unintended access to critical program parameters | 7.2 | |
| High | CVE-2026-33613 | MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray | 8.8 | |
| High | CVE-2023-0985 | Helmholz and MB Connect Line: Account takeover via password reset in multiple products | 8.8 | |
| Critical | CVE-2024-23943 | MB connect line: Cloud API access due to a lack of authentication for a critical function | 9.1 | |
| Critical | CVE-2026-33615 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint | 9.1 | |
| High | CVE-2021-34580 | Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0 | 7.5 | |
| High | CVE-2026-40850 | Unauthenticated SQLi in getAccountData function | 7.5 | |
| High | CVE-2021-34575 | Information Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0 | 7.5 | |
| High | CVE-2026-40817 | Unauthenticated SQLi in getAlarmProfiles function | 7.5 | |
| High | CVE-2026-40819 | Unauthenticated SQLi in sync_data24 task | 7.5 | |
| High | CVE-2026-40815 | Unauthenticated SQLi in _mb24api_getUserAccount function | 7.5 | |
| High | CVE-2026-40814 | Unauthenticated SQLi in _mb24confi_getTagAlarm function | 7.5 | |
| High | CVE-2026-40813 | Unauthenticated SQLi in getLiveValues | 7.5 | |
| High | CVE-2026-40812 | Unauthenticated SQLi in getLiveValues function | 7.5 | |
| High | CVE-2026-40811 | Unauthenticated SQLi in ssoabstractservice | 7.5 | |
| High | CVE-2026-40818 | Unauthenticated SQLi in _mb24confi_getDevice function function | 7.5 | |
| High | CVE-2026-40810 | Unauthenticated SQLi in userinfo Endpoint | 7.5 | |
| High | CVE-2026-40816 | Unauthenticated SQLi in _mb24confi_getTagAlarm function | 7.5 | |
| Medium | CVE-2020-12527 | Improper Access Validation in products of MB connect line and Helmholz | 6.5 | |
| High | CVE-2024-45272 | MB connect line/Helmholz: Generation of weak passwords vulnerability | 7.5 | |
| High | CVE-2025-3090 | MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24 | 8.2 | |
| High | CVE-2025-3092 | MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24 | 7.5 | |
| High | CVE-2020-12528 | MB connect line mymbCONNECT24: Improper Privilege Management | 6.5 | |
| Medium | CVE-2022-22520 | User enumeration vulnerability in MB connect line and Helmholz products | 5.3 |