Remote Code Execution Vulnerability in Software from a Leading Vendor
CVE-2026-10521

8.6HIGH

Key Information:

Vendor

Mb Connect Line

Status
Mbconnect24
Mymbconnect24
Vendor
CVE Published:
23 June 2026

What is CVE-2026-10521?

A vulnerability exists that allows a remote attacker with high privileges to exploit a hidden configuration method. This method is not intended for user access and can be manipulated to change critical program parameters. Such exploitation could lead to severe implications including unauthorized access to sensitive data, loss of system integrity, and disruption of service availability.

Affected Version(s)

mbCONNECT24 0.0.0 < 2.20.2

mbCONNECT24 2.20.1

mymbCONNECT24 0.0.0 < 2.20.2

References

https://www.certvde.com/en/advisories/VDE-2026-068/

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.