A vulnerability identified as critical has been detected in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.3. The affected element is an unknown function of the component com_mb24sysapi Module. This manipulation causes os command injection.

This vulnerability is handled as CVE-2026-32968. The attack can be initiated remotely. There is not any exploit available.