A vulnerability, which was classified as critical, has been found in MB Connect Line mbCONNECT24 and mymbCONNECT24 up to 2.20.0. This affects the function
getDeviceScalings. This manipulation causes sql injection.
The identification of this vulnerability is CVE-2026-40838. It is possible to initiate the attack remotely. There is no exploit available.
