Authenticated OS Command Injection Vulnerability in CERTVDE Products
CVE-2026-14448

8.6HIGH

Key Information:

Vendor: Mb Connect Line
Status: Mbconnect24; Mymbconnect24; Myrex24v2; Myrex24v2.virtual
Vendor: CVE Published:; 20 July 2026

🔔 Create Mb Connect Line Vulnerability Alert

What is CVE-2026-14448?

An authenticated OS command injection vulnerability exists in the system_certificates view of CERTVDE products. This flaw arises from improper handling of special elements in an OS command, allowing a remote attacker with high privileges to exploit it. Successful exploitation could lead to significant breaches of confidentiality, availability, and integrity, posing serious risks to the affected systems and data.

Affected Version(s)

mbCONNECT24 1.0.0 <= 2.20.0

mbCONNECT24 2.20.0

mymbCONNECT24 1.0.0 <= 2.20.0

References

https://www.certvde.com/en/advisories/VDE-2026-044/

https://www.certvde.com/en/advisories/VDE-2026-058/

CVSS V4

Score:

8.6

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 20, 2026
Vulnerability Reserved
Jul 2, 2026

CVE-2026-14448 Data

JSON