A vulnerability marked as critical has been reported in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.3. This affects an unknown function of the component Userinfo Endpoint. Performing a manipulation results in sql injection.
This vulnerability was named CVE-2026-32969. The attack may be initiated remotely. There is no available exploit.