A vulnerability marked as critical has been reported in MB Connect Line mbCONNECT24 and mymbCONNECT24 up to 2.20.0. The affected element is the function
sync_data24. Performing a manipulation results in sql injection.
This vulnerability was named CVE-2026-40819. The attack may be initiated remotely. There is no available exploit.
