CVE-2026-33617 — MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint

CVE-2026-33617

MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint PUBLISHED

Description (CNA)

An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.

Affected (CNA)

Vendor / product	Versions
MB connect line / mbCONNECT24	affected 0.0.0 through 2.19.4
MB connect line / mymbCONNECT24	affected 0.0.0 through 2.19.4

CWE

CWE-497

References

https://certvde.com/de/advisories/VDE-2026-030
https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.