A vulnerability described as critical has been identified in MB Connect Line mbCONNECT24 and mymbCONNECT24 up to 2.20.0. The impacted element is the function
getAccountByID. Executing a manipulation can lead to sql injection.
The identification of this vulnerability is CVE-2026-40821. The attack may be launched remotely. There is no exploit available.
