CVE-2026-33616 | MB connect line mbCONNECT24/mymbCONNECT24 up to 2.19.4 mb24api Endpoint sql injection (VDE-2026-030)

A vulnerability was found in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.4. It has been rated as critical. This affects an unknown part of the component mb24api Endpoint. The manipulation leads to sql injection.

This vulnerability is documented as CVE-2026-33616. The attack can be initiated remotely. There is not any exploit available.