Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

mbCONNECT24 — Vulnerabilities & Security Advisories 55

All 55 CVE vulnerabilities found in mbCONNECT24, with AI-generated Chinese analysis, references, and POCs.

This page documents the security landscape for mbCONNECT24, an industrial software platform by Moeller Intelligent Digital Solutions, specifically focusing on common weakness enumeration vulnerabilities. It aggregates a comprehensive collection of disclosed security issues, including remote code execution flaws, improper access control errors, and cross-site scripting defects, covering advisories released from the platform’s inception through recent updates. Users can utilize this resource to systematically track vendor security advisories and monitor the lifecycle of reported flaws within the mbCONNECT24 ecosystem. The collection enables detailed analysis of specific weakness classes, allowing security professionals to understand the nature of the risks associated with this software. Additionally, it provides a historical view of vulnerability disclosures, helping administrators assess the evolution of security posture and prioritize remediation efforts based on past incidents. By centralizing this data, the page serves as a reference for identifying patterns in how the vendor responds to different types of security threats. This information is critical for IT administrators and security auditors who need to evaluate the integrity of their industrial control systems. The aggregated data reflects known exploitable conditions and configuration weaknesses that have been publicly documented. Reviewing these entries allows stakeholders to better understand the attack surface of mbCONNECT24 and implement appropriate mitigations. The content is strictly factual, derived from official vendor communications and recognized vulnerability databases, ensuring accuracy for technical decision-making.

Vendor: MB Connect Line

CVE IDTitleCVSSSeverityPublished
CVE-2026-14448 Authenticated RCE in system_certificates view CWE-78 7.2 High2026-07-20
CVE-2026-10521 Authenticated unintended access to critical program parameters CWE-425 7.2 High2026-06-23
CVE-2026-40850 Unauthenticated SQLi in getAccountData function CWE-89 7.5 High2026-05-27
CVE-2026-40849 Authenticated SQLi in user_alarmprofile view CWE-89 6.5 Medium2026-05-27
CVE-2026-40848 Authenticated SQLi in tag view CWE-89 6.5 Medium2026-05-27
CVE-2026-40847 Authenticated SQLi in system_tag view CWE-89 6.5 Medium2026-05-27
CVE-2026-40846 Authenticated SQLi in system view CWE-89 6.5 Medium2026-05-27
CVE-2026-40845 Authenticated SQLi in devices_configuration view CWE-89 6.5 Medium2026-05-27
CVE-2026-40844 Authenticated SQLi in dashboard view CWE-89 6.5 Medium2026-05-27
CVE-2026-40843 Authenticated SQLi in alarming view CWE-89 6.5 Medium2026-05-27
CVE-2026-40842 Authenticated SQLi in getWidgetTags function CWE-89 6.5 Medium2026-05-27
CVE-2026-40841 Authenticated SQLi in getProjectTags function CWE-89 6.5 Medium2026-05-27
CVE-2026-40840 Authenticated SQLi in VerifyCreateLicences function CWE-89 6.5 Medium2026-05-27
CVE-2026-40839 Authenticated SQLi in getComponentScalings function CWE-89 6.5 Medium2026-05-27
CVE-2026-40838 Authenticated SQLi in getDeviceScalings function CWE-89 6.5 Medium2026-05-27
CVE-2026-40837 Authenticated SQLi in getProjectScalings function CWE-89 6.5 Medium2026-05-27
CVE-2026-40836 Authenticated SQLi in inmessage model CWE-89 7.1 High2026-05-27
CVE-2026-40835 Authenticated SQLi in saveObjectFromData function CWE-89 6.5 Medium2026-05-27
CVE-2026-40834 Authenticated SQLi in saveDashboardLayout function CWE-89 7.1 High2026-05-27
CVE-2026-40833 Authenticated SQLi in saveDashboardLayout function CWE-89 7.1 High2026-05-27
CVE-2026-40832 Authenticated SQLi in getDevicegroups function CWE-89 6.5 Medium2026-05-27
CVE-2026-40831 Authenticated SQLi in Easy View CWE-89 6.5 Medium2026-05-27
CVE-2026-40830 Authenticated SQLi in UpdateParam function CWE-89 5.5 Medium2026-05-27
CVE-2026-40829 Authenticated SQLi in UpdateParam function CWE-89 5.5 Medium2026-05-27
CVE-2026-40828 Authenticated SQLi in DeleteSysLogEntry function CWE-89 5.5 Medium2026-05-27
CVE-2026-40827 Authenticated SQLi in _RemoveRequest function CWE-89 5.5 Medium2026-05-27
CVE-2026-40826 Authenticated SQLi in dsgvo_contracts view CWE-89 4.9 Medium2026-05-27
CVE-2026-40825 Authenticated SQLi in accountstatus view CWE-89 5.5 Medium2026-05-27
CVE-2026-40824 Authenticated SQLi in accountstatus view CWE-89 5.5 Medium2026-05-27
CVE-2026-40823 Authenticated SQLi in DevSerialReset function CWE-89 5.5 Medium2026-05-27

All 55 known CVE vulnerabilities affecting mbCONNECT24 with full Chinese analysis, references, and POCs where available.