CVE-2026-33617 — MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint
An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint e…
Published: 2026-04-02 · CVSS: 5.3 · CVSS 3.1
An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7