MB Connect Line vulnerabilities
95 CVEs and advisories name MB Connect Line as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-40836Authenticated SQLi in inmessage model
- CVE-2026-40835Authenticated SQLi in saveObjectFromData function
- CVE-2026-40834Authenticated SQLi in saveDashboardLayout function
- CVE-2026-40833Authenticated SQLi in saveDashboardLayout function
- CVE-2026-40832Authenticated SQLi in getDevicegroups function
- CVE-2026-40831Authenticated SQLi in Easy View
- CVE-2026-40830Authenticated SQLi in UpdateParam function
- CVE-2026-40829Authenticated SQLi in UpdateParam function
- CVE-2026-40828Authenticated SQLi in DeleteSysLogEntry function
- CVE-2026-40827Authenticated SQLi in _RemoveRequest function
- CVE-2026-40826Authenticated SQLi in dsgvo_contracts view
- CVE-2026-40825Authenticated SQLi in accountstatus view
- CVE-2026-40824Authenticated SQLi in accountstatus view
- CVE-2026-40823Authenticated SQLi in DevSerialReset function
- CVE-2026-40822Authenticated SQLi in DevSerialReset function
- CVE-2026-40821Authenticated SQLi in getAccountByID function
- CVE-2026-40819Unauthenticated SQLi in sync_data24 task
- CVE-2026-40818Unauthenticated SQLi in _mb24confi_getDevice function function
- CVE-2026-40817Unauthenticated SQLi in getAlarmProfiles function
- CVE-2026-40816Unauthenticated SQLi in _mb24confi_getTagAlarm function
- CVE-2026-40815Unauthenticated SQLi in _mb24api_getUserAccount function
- CVE-2026-40814Unauthenticated SQLi in _mb24confi_getTagAlarm function
- CVE-2026-40813Unauthenticated SQLi in getLiveValues
- CVE-2026-40812Unauthenticated SQLi in getLiveValues function
- CVE-2026-40811Unauthenticated SQLi in ssoabstractservice
- CVE-2026-40810Unauthenticated SQLi in userinfo Endpoint
- CVE-2026-33617MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint
- CVE-2026-33616MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint
- CVE-2026-33615MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint
- CVE-2026-33614MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint