CVE-2025-3091 — MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24
An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.
Published: 2025-06-24 · CVSS: 7.5 · CVSS 3.1
An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7