MB Connect Line vulnerabilities
95 CVEs and advisories name MB Connect Line as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-33613MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray
- CVE-2026-32969Pre-Auth Blind SQLi in userinfo Endpoint
- CVE-2026-32968Unauthenticated RCE in com_mb24sysapi
- CVE-2025-41688High Privilege RCE via LUA Sandbox Escape
- CVE-2025-41681Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input
- CVE-2025-41679Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service
- CVE-2025-41678SQL Injection via POST Requests Allowing Configuration Database Manipulation
- CVE-2025-41677Resource Exhaustion via POST Requests to send-mail Action
- CVE-2025-41676Resource Exhaustion via POST Requests to send-sms Action
- CVE-2025-41675Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization
- CVE-2025-41674Remote Command Injection in diagnostic Action Due to Improper Input Neutralization
- CVE-2025-41673Remote Command Injection in send_sms Action Due to Improper Input Neutralization
- CVE-2025-3092MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24
- CVE-2025-3091MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24
- CVE-2025-3090MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24
- CVE-2024-23943MB connect line: Cloud API access due to a lack of authentication for a critical function
- CVE-2024-23942MB connect line: Configuration File on the client workstation is not encrypted
- CVE-2024-45276MB connect line/Helmholz: tmp directory exposed via webservice
- CVE-2024-45275MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords
- CVE-2024-45274MB connect line/Helmholz: Remote code execution via confnet service
- CVE-2024-45273MB connect line/Helmholz: Weak encryption of configuration file
- CVE-2024-45272MB connect line/Helmholz: Generation of weak passwords vulnerability
- CVE-2024-45271MB connect line/Helmholz: Remote code execution due to improper input validation
- CVE-2023-1779Helmholz and MB Connect Line: Account takeover via password reset in multiple products
- CVE-2023-0985Helmholz and MB Connect Line: Account takeover via password reset in multiple products
- CVE-2022-22520User enumeration vulnerability in MB connect line and Helmholz products
- CVE-2021-34580Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0
- CVE-2021-34575Information Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0
- CVE-2021-34574Password policy evasion in products of MB connect line and Helmholz
- CVE-2021-33527OS Command Injection in mbDIALUP <= 3.9R0.0