VDE-2026-079
Nov. 10, 2026, 11:00 vorm.
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow RCE, DoS or information leakage.
VDE-2026-128
Nov. 10, 2026, 11:00 vorm.
MB connect line mbCONNECT24/mymbCONNECT24 ships with a bundled PHP version that is affected by two vulnerabilities known as "php2shell".
VDE-2026-068
Juni 23, 2026, 1:00 nachm.
There is a vulnerability in mbCONNECT24/mymbCONNECT24 that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program …
VDE-2026-044
Juli 20, 2026, 3:30 nachm.
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.
VDE-2026-054
Mai 27, 2026, 1:00 nachm.
Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.
VDE-2026-030
April 2, 2026, 1:00 nachm.
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow RCE, SQLi or information leakage.
VDE-2026-024
März 23, 2026, 1:00 nachm.
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow unauthenticated RCE or SQLi.
VDE-2025-065
Juli 31, 2025, 12:00 nachm.
An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in mbNET devices, enabling the execution of arbitrary operating system commands and leading to full system …