CVE-2026-40827 | MB Connect Line mbCONNECT24/mymbCONNECT24 up to 2.20.0 DELETE Command _RemoveRequest sql injection (VDE-2026-044)

SecurityVulns
Yanac

A vulnerability categorized as critical has been discovered in MB Connect Line mbCONNECT24 and mymbCONNECT24 up to 2.20.0. Affected by this issue is the function _RemoveRequest of the component DELETE Command Handler. The manipulation results in sql injection.

This vulnerability is reported as CVE-2026-40827. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More