CVE-2026-33615 | MB connect line mbCONNECT24/mymbCONNECT24 up to 2.19.4 Setinfo Endpoint sql injection (VDE-2026-030)

A vulnerability was found in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.4. It has been declared as critical. Affected by this issue is some unknown functionality of the component Setinfo Endpoint. Executing a manipulation can lead to sql injection.

This vulnerability is registered as CVE-2026-33615. It is possible to launch the attack remotely. No exploit is available.