What is the CVSS score of EUVD-2026-18174?

EUVD-2026-18174 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Mbconnect24 are affected by EUVD-2026-18174?

CVE-2026-33614 is a critical SQL injection vulnerability in MB Connect Line's mbCONNECT24 and mymbCONNECT24 products that allows unauthenticated attackers to extract sensitive data directly from the…

How to fix or mitigate EUVD-2026-18174?

Within 24 hours: Inventory all instances of mbCONNECT24 and mymbCONNECT24 in your environment and isolate affected systems from untrusted networks. Within 7 days: Implement network-level access controls restricting inbound traffic to the getinfo endpoint to trusted sources only; contact MB Connect Line for patch availability and timeline. Within 30 days: Apply vendor-released patch immediately upon availability, or migrate to alternative products if no patch is confirmed within 60 days.

Mbconnect24 EUVD-2026-18174

| CVE-2026-33614 HIGH

SQL Injection (CWE-89)

2026-04-02 CERTVDE

SQLi Mbconnect24 Mymbconnect24

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Re-analysis Queued

Apr 16, 2026 - 15:52 vuln.today

cvss_changed

EUVD ID Assigned

Apr 02, 2026 - 09:30 euvd

EUVD-2026-18174

Analysis Generated

Apr 02, 2026 - 09:30 vuln.today

CVE Published

Apr 02, 2026 - 08:59 nvd

HIGH 7.5

DescriptionCVE.org

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

AnalysisAI

SQL injection in MB Connect Line's mbCONNECT24 and mymbCONNECT24 products allows unauthenticated remote attackers to extract sensitive data through the getinfo endpoint. The vulnerability permits direct database queries without authentication, enabling complete confidentiality breach of stored information. EPSS and KEV data not provided; exploitation status unknown beyond technical disclosure by CERT@VDE.

Technical ContextAI

This vulnerability stems from CWE-89 (SQL Injection) where the getinfo endpoint fails to properly sanitize or parameterize user-supplied input before incorporating it into SQL SELECT statements. The affected products are MB Connect Line's mbCONNECT24 (CPE 2.3:a:mb_connect_line:mbconnect24) and mymbCONNECT24 (CPE 2.3:a:mb_connect_line:mymbconnect24), which are industrial IoT connectivity solutions used for secure remote access to machines and systems. The lack of input validation allows attackers to inject arbitrary SQL commands, directly querying the backend database. The CVSS vector confirms this is a network-accessible vulnerability with low attack complexity requiring no user interaction, making it straightforward to exploit once the vulnerable endpoint is identified.

RemediationAI

Organizations should immediately consult the official MB Connect Line security advisory published by CERT@VDE at https://certvde.com/de/advisories/VDE-2026-030 and the corresponding CSAF document at https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json for vendor-specific patching guidance and fixed versions. Patch availability per vendor advisory should be confirmed from these authoritative sources. Until patches can be applied, implement network segmentation to restrict access to the getinfo endpoint to trusted IP ranges only, deploy web application firewall rules to detect and block SQL injection patterns targeting this endpoint, and monitor database query logs for anomalous SELECT statements. Disable or remove the getinfo endpoint if it is not operationally required. Given the unauthenticated nature of the vulnerability, perimeter controls are critical interim mitigations.