Vulnerabilities in MB Connect Line
95 resultsCVE-2025-41676MEDIUMResource Exhaustion via POST Requests to send-sms ActionEPSS 0.6%CVE-2024-45276HIGHMB connect line/Helmholz: tmp directory exposed via webserviceEPSS 0.6%CVE-2024-45272HIGHMB connect line/Helmholz: Generation of weak passwords vulnerabilityEPSS 0.6%CVE-2024-23943CRITICALMB connect line: Cloud API access due to a lack of authentication for a critical functionEPSS 0.6%CVE-2026-32968CRITICALUnauthenticated RCE in com_mb24sysapiEPSS 0.6%CVE-2026-10521HIGHAuthenticated unintended access to critical program parametersEPSS 0.6%CVE-2026-33613HIGHMB connect line mbCONNECT24 vulnerable to RCE in generateSrpArrayEPSS 0.5%CVE-2023-1779MEDIUMHelmholz and MB Connect Line: Account takeover via password reset in multiple productsEPSS 0.5%CVE-2025-3092HIGHMB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24EPSS 0.5%CVE-2026-32969HIGHPre-Auth Blind SQLi in userinfo EndpointEPSS 0.5%CVE-2025-3090HIGHMB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24EPSS 0.5%CVE-2026-33615CRITICALMB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo EndpointEPSS 0.4%CVE-2026-40850HIGHUnauthenticated SQLi in getAccountData functionEPSS 0.4%CVE-2025-3091HIGHMB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24EPSS 0.4%CVE-2026-40852HIGHCommand injection via malicious configurationEPSS 0.4%CVE-2026-33614HIGHMB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpointEPSS 0.3%CVE-2026-33616HIGHMB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api EndpointEPSS 0.3%CVE-2025-41681MEDIUMPersistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of InputEPSS 0.3%CVE-2026-40831HIGHAuthenticated SQLi in Easy ViewEPSS 0.3%CVE-2026-40819HIGHUnauthenticated SQLi in sync_data24 taskEPSS 0.3%