CVE-2026-33617

Published: Apr 2, 2026Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: info@cert.vde.com (Secondary)

Description

An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.

Affected (2)

Products: Mbconnectline: Mbconnect24, Mymbconnect24

Mbconnectline

2 products

Mbconnect24

Mymbconnect24

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mbconnectline Mbconnect24	Up to 2.19.4
Mbconnectline Mymbconnect24	Up to 2.19.4

Related CWEs

CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (2)

https://certvde.com/de/advisories/VDE-2026-030

Source: info@cert.vde.com

Third Party Advisory

https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json

Source: info@cert.vde.com

Vendor Advisory

Timeline

No history available yet.