CVE-2026-40841 | MB Connect Line mbCONNECT24/mymbCONNECT24 up to 2.20.0 getProjectTags sql injection (VDE-2026-044)

A vulnerability was found in MB Connect Line mbCONNECT24 and mymbCONNECT24 up to 2.20.0 and classified as critical. Affected by this vulnerability is the function getProjectTags. Executing a manipulation can lead to sql injection.

This vulnerability is tracked as CVE-2026-40841. The attack can be launched remotely. No exploit exists.