Skip to content
OpenAdvisories
High · 7.2 CVE-2026-10521 EUVD-2026-38422GHSA-vwqx-9g89-x938

Authenticated unintended access to critical program parameters

Published Jun 23, 2026 · Updated Jun 23, 2026 · Assigned by CERTVDE

Vendor: MB connect line Product: mbCONNECT24 Product: mymbCONNECT24

Description

An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability.

Affected products

VendorProductAffectedFixed
MB connect line mbCONNECT24 0.0.0 – < 2.20.2, 2.20.1 2.20.2
MB connect line mymbCONNECT24 0.0.0 – < 2.20.2, 2.20.1 2.20.2

Advisories 2

References