An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.
References
| Link | Resource |
|---|---|
| https://certvde.com/de/advisories/VDE-2026-030 | Third Party Advisory |
| https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Apr 2026, 15:40
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mbconnectline mbconnect24
Mbconnectline Mbconnectline mymbconnect24 |
|
| CPE | cpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:* cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:* |
|
| References | () https://certvde.com/de/advisories/VDE-2026-030 - Third Party Advisory | |
| References | () https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json - Vendor Advisory |
02 Apr 2026, 10:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-02 10:16
Updated : 2026-04-16 15:40
NVD link : CVE-2026-33617
Mitre link : CVE-2026-33617
CVE.ORG link : CVE-2026-33617
JSON object : View
Products Affected
mbconnectline
- mbconnect24
- mymbconnect24
CWE
CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere