Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

mbCONNECT24 — Vulnerabilities & Security Advisories 55

All 55 CVE vulnerabilities found in mbCONNECT24, with AI-generated Chinese analysis, references, and POCs.

This aggregation page documents security vulnerabilities affecting the mbCONNECT24 industrial connectivity gateway, focusing on specific weakness types and associated security tags. It collects reported flaws and patch advisories spanning the product's operational lifecycle, covering critical periods from its initial deployment through recent maintenance cycles. Users can utilize this repository to track vendor-issued advisories, analyze the prevalence of particular weakness classes within the device, and review the complete vulnerability history for the mbCONNECT24 hardware. The data provides a structured view of security incidents, enabling researchers and security teams to assess risk exposure and verify remediation status across different firmware versions. By centralizing these records, the page facilitates a comprehensive understanding of the security posture associated with this specific industrial component, allowing for systematic analysis of past and present threats without requiring separate lookups in disparate databases.

Vendor: MB Connect Line

CVE ID Title CVSS Severity Published
CVE-2026-14448 Authenticated RCE in system_certificates view CWE-78 7.2 High 2026-07-20
CVE-2026-10521 Authenticated unintended access to critical program parameters CWE-425 7.2 High 2026-06-23
CVE-2026-40850 Unauthenticated SQLi in getAccountData function CWE-89 7.5 High 2026-05-27
CVE-2026-40849 Authenticated SQLi in user_alarmprofile view CWE-89 6.5 Medium 2026-05-27
CVE-2026-40848 Authenticated SQLi in tag view CWE-89 6.5 Medium 2026-05-27
CVE-2026-40847 Authenticated SQLi in system_tag view CWE-89 6.5 Medium 2026-05-27
CVE-2026-40846 Authenticated SQLi in system view CWE-89 6.5 Medium 2026-05-27
CVE-2026-40845 Authenticated SQLi in devices_configuration view CWE-89 6.5 Medium 2026-05-27
CVE-2026-40844 Authenticated SQLi in dashboard view CWE-89 6.5 Medium 2026-05-27
CVE-2026-40843 Authenticated SQLi in alarming view CWE-89 6.5 Medium 2026-05-27
CVE-2026-40842 Authenticated SQLi in getWidgetTags function CWE-89 6.5 Medium 2026-05-27
CVE-2026-40841 Authenticated SQLi in getProjectTags function CWE-89 6.5 Medium 2026-05-27
CVE-2026-40840 Authenticated SQLi in VerifyCreateLicences function CWE-89 6.5 Medium 2026-05-27
CVE-2026-40839 Authenticated SQLi in getComponentScalings function CWE-89 6.5 Medium 2026-05-27
CVE-2026-40838 Authenticated SQLi in getDeviceScalings function CWE-89 6.5 Medium 2026-05-27
CVE-2026-40837 Authenticated SQLi in getProjectScalings function CWE-89 6.5 Medium 2026-05-27
CVE-2026-40836 Authenticated SQLi in inmessage model CWE-89 7.1 High 2026-05-27
CVE-2026-40835 Authenticated SQLi in saveObjectFromData function CWE-89 6.5 Medium 2026-05-27
CVE-2026-40834 Authenticated SQLi in saveDashboardLayout function CWE-89 7.1 High 2026-05-27
CVE-2026-40833 Authenticated SQLi in saveDashboardLayout function CWE-89 7.1 High 2026-05-27
CVE-2026-40832 Authenticated SQLi in getDevicegroups function CWE-89 6.5 Medium 2026-05-27
CVE-2026-40831 Authenticated SQLi in Easy View CWE-89 6.5 Medium 2026-05-27
CVE-2026-40830 Authenticated SQLi in UpdateParam function CWE-89 5.5 Medium 2026-05-27
CVE-2026-40829 Authenticated SQLi in UpdateParam function CWE-89 5.5 Medium 2026-05-27
CVE-2026-40828 Authenticated SQLi in DeleteSysLogEntry function CWE-89 5.5 Medium 2026-05-27
CVE-2026-40827 Authenticated SQLi in _RemoveRequest function CWE-89 5.5 Medium 2026-05-27
CVE-2026-40826 Authenticated SQLi in dsgvo_contracts view CWE-89 4.9 Medium 2026-05-27
CVE-2026-40825 Authenticated SQLi in accountstatus view CWE-89 5.5 Medium 2026-05-27
CVE-2026-40824 Authenticated SQLi in accountstatus view CWE-89 5.5 Medium 2026-05-27
CVE-2026-40823 Authenticated SQLi in DevSerialReset function CWE-89 5.5 Medium 2026-05-27

All 55 known CVE vulnerabilities affecting mbCONNECT24 with full Chinese analysis, references, and POCs where available.