A vulnerability labeled as critical has been found in MB Connect Line mbCONNECT24 and mymbCONNECT24 up to 2.20.0. Impacted is the function
_mb24confi_getDevice. Such manipulation leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-40818. The attack can be launched remotely. No exploit exists.
