Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-10521

Authenticated unintended access to critical program parameters

Description

An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MB connect line mbCONNECT24

Default version status: unaffected

  • 0.0.0 to < 2.20.2affected

MB connect line mymbCONNECT24

Default version status: unaffected

  • 0.0.0 to < 2.20.2affected

MB connect line mbCONNECT24

Default version status: unaffected

  • 2.20.1affected

MB connect line mymbCONNECT24

Default version status: unaffected

  • 2.20.1affected

References