Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Mb Connect Line
Mymbconnect24

MB connect line mymbCONNECT24 Vulnerabilities: CVEs, CISA KEV & Security Advisories

MB connect line

87 CVEs

MB

MB connect line mymbCONNECT24 Vulnerabilities

CVE security advisories and vulnerability history for mymbCONNECT24 by MB connect line.

87

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.2

Avg CVSS

2020–2026

Last updated July 20, 2026

Overview

MB connect line mymbCONNECT24 has 87 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

Severity and exploitation

How the CVSS severity of MB connect line mymbCONNECT24's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High58

Medium24

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of MB connect line mymbCONNECT24's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No MB connect line mymbCONNECT24 CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every MB connect line mymbCONNECT24 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 2.20.041 CVEs
0.0.0 <= v <= 2.20.040 CVEs
<= 2.6.210 CVEs
<= 2.11.29 CVEs
<= 2.19.45 CVEs
0.0.0 <= v <= 2.19.45 CVEs
<= 2.6.14 CVEs
< 2.18.03 CVEs
<= 2.5.03 CVEs
2.6.2 <= v <= 2.6.23 CVEs
< 2.16.22 CVEs
< 2.16.32 CVEs
< 2.16.52 CVEs
<= 2.13.32 CVEs
<= 2.16.22 CVEs
0.0.0 <= v <= 2.16.22 CVEs
0.0.0 <= v <= 2.19.32 CVEs
1.0.0 <= v <= 2.13.32 CVEs
2 <= v <= 2.11.22 CVEs
<= 2.14.21 CVE
<= 2.8.01 CVE
<= 2.9.01 CVE
>= 2.20.11 CVE
0.0.0 <= v < 2.20.21 CVE
1.0.0 <= v <= 2.20.01 CVE
2.6.2 <= v <= 2.11.21 CVE
2.8.0 <= v <= 2.8.01 CVE
2.9.0 <= v <= 2.9.01 CVE

Fixed in

2.18.03 CVEs
2.16.22 CVEs
2.16.32 CVEs
2.16.52 CVEs
2.20.21 CVE

Find a version

87 CVEs

Sort

Authenticated RCE in system_certificates view
CVE-2026-14448CWE-78
High · CVSS 8.6
EPSS 0.9% (60th pct)2026-07-20
Authenticated unintended access to critical program parameters
CVE-2026-10521
Patch
CWE-425
High · CVSS 8.6
EPSS 0.6% (45th pct)2026-06-23
Unauthenticated SQLi in getAccountData function
CVE-2026-40850CWE-89
High · CVSS 8.7
EPSS 0.5% (44th pct)2026-05-27
Authenticated SQLi in user_alarmprofile view
CVE-2026-40849CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in tag view
CVE-2026-40848CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in system_tag view
CVE-2026-40847CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in system view
CVE-2026-40846CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in devices_configuration view
CVE-2026-40845CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in dashboard view
CVE-2026-40844CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in alarming view
CVE-2026-40843CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in getWidgetTags function
CVE-2026-40842CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in getProjectTags function
CVE-2026-40841CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in VerifyCreateLicences function
CVE-2026-40840CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in getComponentScalings function
CVE-2026-40839CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in getDeviceScalings function
CVE-2026-40838CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in getProjectScalings function
CVE-2026-40837CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in inmessage model
CVE-2026-40836CWE-89
High · CVSS 7.1
EPSS 0.4% (30th pct)2026-05-27
Authenticated SQLi in saveObjectFromData function
CVE-2026-40835CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in saveDashboardLayout function
CVE-2026-40834CWE-89
High · CVSS 7.1
EPSS 0.4% (30th pct)2026-05-27
Authenticated SQLi in saveDashboardLayout function
CVE-2026-40833CWE-89
High · CVSS 7.1
EPSS 0.4% (30th pct)2026-05-27
Authenticated SQLi in getDevicegroups function
CVE-2026-40832CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in Easy View
CVE-2026-40831CWE-89
High · CVSS 7.1
EPSS 0.4% (37th pct)2026-05-27
Authenticated SQLi in UpdateParam function
CVE-2026-40830CWE-89
High · CVSS 7.0
EPSS 0.4% (33th pct)2026-05-27
Authenticated SQLi in UpdateParam function
CVE-2026-40829CWE-89
High · CVSS 7.0
EPSS 0.4% (33th pct)2026-05-27
Authenticated SQLi in DeleteSysLogEntry function
CVE-2026-40828CWE-89
High · CVSS 7.0
EPSS 0.4% (33th pct)2026-05-27
Authenticated SQLi in _RemoveRequest function
CVE-2026-40827CWE-89
High · CVSS 7.0
EPSS 0.4% (33th pct)2026-05-27
Authenticated SQLi in dsgvo_contracts view
CVE-2026-40826CWE-89
Medium · CVSS 6.9
EPSS 0.5% (40th pct)2026-05-27
Authenticated SQLi in accountstatus view
CVE-2026-40825CWE-89
High · CVSS 7.0
EPSS 0.4% (33th pct)2026-05-27
Authenticated SQLi in accountstatus view
CVE-2026-40824CWE-89
High · CVSS 7.0
EPSS 0.4% (33th pct)2026-05-27
Authenticated SQLi in DevSerialReset function
CVE-2026-40823CWE-89
High · CVSS 7.0
EPSS 0.4% (33th pct)2026-05-27

Showing 30 of 87

Common weakness types

The CWE weakness categories most often found in MB connect line mymbCONNECT24 CVEs. Follow any weakness for its full explanation.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')47 CVEs
CWE-269Improper Privilege Management5 CVEs
CWE-204Observable Response Discrepancy3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs

Disclosure activity by year

How many MB connect line mymbCONNECT24 CVEs were published each year.

2020

7

2021

20

2022

1

2023

3

2024

2

2025

5

2026

49

Other MB connect line products

Browse vulnerabilities for other products by MB connect line.

mbCONNECT2485 CVEs mbNET.mini15 CVEs mbnet.mini firmware13 CVEs mbnet6 CVEs REX 1006 CVEs mbNET/mbNET.rokey4 CVEs mbNET.rokey4 CVEs mbNET HW13 CVEs

All MB connect line vulnerabilities

Frequently asked questions

Common questions about MB connect line mymbCONNECT24 vulnerabilities.

How many CVEs does MB connect line mymbCONNECT24 have?: MB connect line mymbCONNECT24 has 87 published CVE records since 2020.
How many MB connect line mymbCONNECT24 CVEs are in CISA KEV?: None of MB connect line mymbCONNECT24's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for MB connect line mymbCONNECT24 vulnerabilities?: No MB connect line mymbCONNECT24 CVEs currently have a tracked public exploit in this dataset.
Which versions of MB connect line mymbCONNECT24 are affected?: 33 distinct MB connect line mymbCONNECT24 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in MB connect line mymbCONNECT24 CVEs?: MB connect line mymbCONNECT24's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-269 (Improper Privilege Management), CWE-204 (Observable Response Discrepancy), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical MB connect line mymbCONNECT24 vulnerabilities are there?: MB connect line mymbCONNECT24 has 5 critical and 58 high-severity CVEs.
What is the average severity of MB connect line mymbCONNECT24 CVEs?: The average CVSS base score across MB connect line mymbCONNECT24's scored CVEs is 7.2.

References

All MB connect line vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track MB connect line mymbCONNECT24 vulnerabilities

Get an alert for each new MB connect line mymbCONNECT24 CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References