A vulnerability has been found in MB Connect Line mbCONNECT24 and mymbCONNECT24 up to 2.20.0 and classified as critical. Affected is the function
VerifyCreateLicences. Performing a manipulation results in sql injection.
This vulnerability is identified as CVE-2026-40840. The attack can be initiated remotely. There is not any exploit available.
