# MB connect line vulnerabilities Source: https://junglewise.ai/threats/vendors/mb-connect-line Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/mb-connect-line.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 42 vulnerabilities in MB connect line: 1 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-40820, was published on 12 November 2026. Nothing was published in the last eight weeks. 2 technologies have a page of their own. ## Counts - Last 7 days: 1 - Last 30 days: 1 - Last 90 days: 1 - All time: 42 (0 critical, 0 exploited in the wild) ## About MB connect line MB connect line is a provider of solutions for remote maintenance and secure communication in industrial automation. ## Latest MB connect line vulnerabilities - [CVE-2026-40820: MB connect line mbCONNECT24 SQL injection in getVpnData](https://junglewise.ai/threats/cve-2026-40820-a-high-privileged-remote-attacker-can-exploit-an-unauthenticated) (medium, CVSS 4.9, published 12 Nov 2026) - [CVE-2026-14448: MB connect line and Helmholz OS command injection in system_certificates view](https://junglewise.ai/threats/cve-2026-14448-mb-connect-line-and-helmholz-os-command-injection-in-system) (high, CVSS 7.2, published 20 Jul 2026) - [CVE-2026-10521: MB connect line mbCONNECT24 forced browsing in configuration settings](https://junglewise.ai/threats/cve-2026-10521-mb-connect-line-mbconnect24-forced-browsing-in-configuration) (high, CVSS 7.2, published 23 Jun 2026) - [CVE-2026-40852: MB connect line mbNET OS command injection in config generator](https://junglewise.ai/threats/cve-2026-40852-mb-connect-line-mbnet-os-command-injection-in-config-generator) (high, CVSS 7.2, published 27 May 2026) - [CVE-2026-40851: MB connect line mbNET code execution in cfgparser via USB](https://junglewise.ai/threats/cve-2026-40851-mb-connect-line-mbnet-code-execution-in-cfgparser-via-usb) (high, CVSS 8.4, published 27 May 2026) - [CVE-2026-40849: MB connect line mbCONNECT24 SQL injection in user_alarmprofile view](https://junglewise.ai/threats/cve-2026-40849-mb-connect-line-mbconnect24-sql-injection-in-user-alarmprofile) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40848: MB connect line mbCONNECT24 SQL injection in tag view](https://junglewise.ai/threats/cve-2026-40848-mb-connect-line-mbconnect24-sql-injection-in-tag-view) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40847: MB connect line mbCONNECT24 SQL injection in system_tag view](https://junglewise.ai/threats/cve-2026-40847-mb-connect-line-mbconnect24-sql-injection-in-system-tag-view) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40846: MB connect line mbCONNECT24 SQL injection in system view](https://junglewise.ai/threats/cve-2026-40846-mb-connect-line-mbconnect24-sql-injection-in-system-view) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40844: MB connect line mbCONNECT24 SQL injection in dashboard view](https://junglewise.ai/threats/cve-2026-40844-mb-connect-line-mbconnect24-sql-injection-in-dashboard-view) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40843: MB connect line mbCONNECT24 SQL injection in alarming view](https://junglewise.ai/threats/cve-2026-40843-mb-connect-line-mbconnect24-sql-injection-in-alarming-view) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40842: MB connect line mbCONNECT24 SQL injection in getWidgetTags](https://junglewise.ai/threats/cve-2026-40842-mb-connect-line-mbconnect24-sql-injection-in-getwidgettags) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40841: MB connect line mbCONNECT24 SQL injection in getProjectTags](https://junglewise.ai/threats/cve-2026-40841-mb-connect-line-mbconnect24-sql-injection-in-getprojecttags) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40840: MB connect line mbCONNECT24 SQL injection in VerifyCreateLicences](https://junglewise.ai/threats/cve-2026-40840-mb-connect-line-mbconnect24-sql-injection-in-verifycreatelicences) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40839: MB connect line mbCONNECT24 SQL injection in getComponentScalings](https://junglewise.ai/threats/cve-2026-40839-mb-connect-line-mbconnect24-sql-injection-in-getcomponentscalings) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40838: MB connect line mbCONNECT24 SQL injection in getDeviceScalings](https://junglewise.ai/threats/cve-2026-40838-mb-connect-line-mbconnect24-sql-injection-in-getdevicescalings) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40837: MB connect line mbCONNECT24 SQL injection in getProjectScalings](https://junglewise.ai/threats/cve-2026-40837-mb-connect-line-mbconnect24-sql-injection-in-getprojectscalings) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40836: MB connect line mbCONNECT24 SQL injection in inmessage model](https://junglewise.ai/threats/cve-2026-40836-mb-connect-line-mbconnect24-sql-injection-in-inmessage-model) (high, CVSS 7.1, published 27 May 2026) - [CVE-2026-40834: MB connect line mbCONNECT24 SQL injection in saveDashboardLayout](https://junglewise.ai/threats/cve-2026-40834-mb-connect-line-mbconnect24-sql-injection-in-savedashboardlayout) (high, CVSS 7.1, published 27 May 2026) - [CVE-2026-40833: MB connect line mbCONNECT24 SQL injection in dash.php](https://junglewise.ai/threats/cve-2026-40833-mb-connect-line-mbconnect24-sql-injection-in-dash-php) (high, CVSS 7.1, published 27 May 2026) - [CVE-2026-40832: MB connect line mbCONNECT24 SQL injection in getDevicegroups](https://junglewise.ai/threats/cve-2026-40832-mb-connect-line-mbconnect24-sql-injection-in-getdevicegroups) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40831: MB connect line mbCONNECT24 SQL injection in Easy View](https://junglewise.ai/threats/cve-2026-40831-mb-connect-line-mbconnect24-sql-injection-in-easy-view) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-40830: MB connect line mbCONNECT24 SQL injection in admin.mbnetj.php](https://junglewise.ai/threats/cve-2026-40830-mb-connect-line-mbconnect24-sql-injection-in-admin-mbnetj-php) (medium, CVSS 5.5, published 27 May 2026) - [CVE-2026-40829: MB connect line mbCONNECT24 SQL injection in UpdateParam](https://junglewise.ai/threats/cve-2026-40829-mb-connect-line-mbconnect24-sql-injection-in-updateparam) (medium, CVSS 5.5, published 27 May 2026) - [CVE-2026-40828: MB connect line mbCONNECT24 SQL injection in DeleteSysLogEntry](https://junglewise.ai/threats/cve-2026-40828-mb-connect-line-mbconnect24-sql-injection-in-deletesyslogentry) (medium, CVSS 5.5, published 27 May 2026) ## Most severe MB connect line vulnerabilities - [CVE-2026-40851: MB connect line mbNET code execution in cfgparser via USB](https://junglewise.ai/threats/cve-2026-40851-mb-connect-line-mbnet-code-execution-in-cfgparser-via-usb) (high, CVSS 8.4, published 27 May 2026) - [CVE-2026-40819: MB connect line mbCONNECT24 SQL injection in sync_data24 task](https://junglewise.ai/threats/cve-2026-40819-mb-connect-line-mbconnect24-sql-injection-in-sync-data24-task) (high, CVSS 7.5, published 27 May 2026) - [CVE-2026-40818: MB connect line mbCONNECT24 SQL injection in _mb24confi_getDevice](https://junglewise.ai/threats/cve-2026-40818-mb-connect-line-mbconnect24-sql-injection-in-mb24confi-getdevice) (high, CVSS 7.5, published 27 May 2026) - [CVE-2026-40817: MB connect line mbCONNECT24 SQL injection in getAlarmProfiles](https://junglewise.ai/threats/cve-2026-40817-mb-connect-line-mbconnect24-sql-injection-in-getalarmprofiles) (high, CVSS 7.5, published 27 May 2026) - [CVE-2026-40816: MB connect line mbCONNECT24 SQL injection in mb24alarm.php](https://junglewise.ai/threats/cve-2026-40816-mb-connect-line-mbconnect24-sql-injection-in-mb24alarm-php) (high, CVSS 7.5, published 27 May 2026) - [CVE-2026-40815: MB connect line mbCONNECT24 SQL injection in _mb24api_getUserAccount](https://junglewise.ai/threats/cve-2026-40815-mb-connect-line-mbconnect24-sql-injection-in-mb24api) (high, CVSS 7.5, published 27 May 2026) - [CVE-2026-40814: MB connect line mbCONNECT24 SQL injection in dataapi.php](https://junglewise.ai/threats/cve-2026-40814-mb-connect-line-mbconnect24-sql-injection-in-dataapi-php) (high, CVSS 7.5, published 27 May 2026) - [CVE-2026-40813: MB connect line mbCONNECT24 SQL injection in getLiveValues](https://junglewise.ai/threats/cve-2026-40813-mb-connect-line-mbconnect24-sql-injection-in-getlivevalues) (high, CVSS 7.5, published 27 May 2026) - [CVE-2026-40812: MB connect line mbCONNECT24 SQL injection in getLiveValues](https://junglewise.ai/threats/cve-2026-40812-mb-connect-line-mbconnect24-sql-injection-in-getlivevalues) (high, CVSS 7.5, published 27 May 2026) - [CVE-2026-40811: MB connect line mbCONNECT24 SQL injection in ssoabstractservice](https://junglewise.ai/threats/cve-2026-40811-mb-connect-line-mbconnect24-sql-injection-in-ssoabstractservice) (high, CVSS 7.5, published 27 May 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## MB connect line technologies - [MB connect line mbCONNECT24](https://junglewise.ai/threats/technologies/mbconnect24): 43 vulnerabilities - [MB connect line mymbCONNECT24](https://junglewise.ai/threats/technologies/mymbconnect24): 43 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "MB connect line vulnerabilities", https://junglewise.ai/threats/vendors/mb-connect-line, 13 November 2026.