mbCONNECT24 CVE-2026-40822

Q: What is the CVSS score of CVE-2026-40822?

CVE-2026-40822 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-32126 MEDIUM

SQL Injection (CWE-89)

2026-05-27 info@cert.vde.com

GHSA-h4f9-4gwx-v954

SQLi

6.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 21:34 vuln.today

DescriptionCVE.org

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

AnalysisAI

SQL injection in the DevSerialReset function of MB Connect Line's mbCONNECT24, myREX24V2, mymbCONNECT24, and myREX24V2.virtual industrial remote access platforms allows a high-privileged remote attacker to read arbitrary database contents via a maliciously crafted SQL SELECT statement. All product variants at or below version 2.20.0 are confirmed affected per ENISA EUVD-2026-32126. No public exploit code exists and EPSS is 0.03% (10th percentile), indicating low observed exploitation pressure at time of analysis; however, the industrial/OT targeting profile warrants attention.

Technical ContextAI

The affected products - mbCONNECT24, mymbCONNECT24, myREX24V2, and myREX24V2.virtual - are industrial remote access gateways and VPN platforms produced by MB Connect Line, commonly deployed in OT/ICS environments. The vulnerability (CWE-89: Improper Neutralization of Special Elements used in an SQL Command) resides in the DevSerialReset function, which fails to sanitize user-supplied input before incorporating it into a SQL SELECT query. This allows an attacker to inject additional SQL clauses and read data from the underlying database. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:H/UI:N) confirms the attack is reachable over the network without additional technical preconditions, though high privileges are required. Scope impact is confined to the vulnerable component (SC:N/SI:N/SA:N), with only confidentiality breached (VC:H).

RemediationAI

The primary remediation is to upgrade all affected MB Connect Line products (mbCONNECT24, mymbCONNECT24, myREX24V2, myREX24V2.virtual) beyond version 2.20.0 once a patched release is confirmed. Consult the CERT VDE advisory at https://www.certvde.com/en/advisories/VDE-2026-044/ for the vendor-confirmed fixed version, as the available data confirms affected versions but does not independently specify an exact patched release number. As a compensating control pending patching, restrict high-privileged account access to the management interface to trusted source IPs only using network-layer ACLs or a dedicated management VLAN - this directly addresses the PR:H attack path by reducing the pool of potential authenticated attackers. Additionally, audit and rotate all high-privileged credentials on affected devices immediately, as these are the prerequisite for exploitation. Monitor database query logs for anomalous SELECT patterns indicative of injection attempts.