CVE-2026-33617: Mbconnectline MBCONNECT24

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.

Affected products

• Mbconnectline MBCONNECT24: up to and including 2.19.4
• Mbconnectline MYMBCONNECT24: up to and including 2.19.4

Published 2026-04-02. Last modified 2026-06-17.