CVE-2026-40848 in mbCONNECT24info

Zusammenfassung

von MITRE • 27.05.2026

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

CERTVDE

Reservieren

15.04.2026

Veröffentlichung

27.05.2026

Moderieren

akzeptiert

Eintrag

VDB-366000

CPE

bereit

EPSS

0.00039

KEV

nein

Aktivitäten

low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-40848
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-40848
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-40848/

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!