UNKNOWNCVE-2026-33617

MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint

Platform

other

Component

mbconnect24

An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.

How to fix

Actualice a una versión posterior a la 2.19.4 para corregir la vulnerabilidad de divulgación de información. Esto evitará que atacantes no autenticados accedan a archivos de configuración que contienen credenciales de la base de datos.

Monitor your dependencies automatically

Get notified when new vulnerabilities affect your projects. Free forever.

Start free
CVE-2026-33617 — Vulnerability Details | NextGuard | NextGuard