Volerion logoVolerion
Volerion logoVolerion

MB Connect Line mbCONNECT24 and mymbCONNECT24 SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in the MB Connect Line products mbCONNECT24 and mymbCONNECT24, specifically in the user_alarmprofile view. This vulnerability allows low-privileged remote attackers to exploit improper handling of special elements in a SQL SELECT command, leading to a complete loss of confidentiality.

Impact

Exploitation of this vulnerability allows for SQL injection, with varying levels of database access depending on the specific vulnerability exploited.

Remediation

Users are advised to update their mbCONNECT24 or mymbCONNECT24 instance to version 2.20.1.

Added: May 27, 2026, 9:21 AM
Updated: May 27, 2026, 9:21 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
4.7
remediation
7.7
relevance
9.3
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.