CVE-2021-34575: Mbconnectline MBCONNECT24

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.

Affected products

• Mbconnectline MBCONNECT24: up to and including 2.8.0
• Mbconnectline MYMBCONNECT24: up to and including 2.8.0

Published 2021-08-02. Last modified 2026-06-17.