CVE-2026-33616

Description

References

• certvde.com/de/advisories/VDE-2026-030 · Third Party Advisory
• mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json · Vendor Advisory

Weitere Schwachstellen in mbconnect24

• CVE-2026-33617MITTEL 5.3An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confid…
• CVE-2026-33615KRITISCH 9.1An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutra…
• CVE-2026-33614HOCH 7.5An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutra…
• CVE-2026-33613HOCH 8.8Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the gene…
• CVE-2024-45273HOCH 7.8An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of th…