CVE-2026-33613 HIGH

CVE-2026-33613: MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray

Vendor Mb Connect Line
Product mbCONNECT24
Weakness CWE-78
Published April 2, 2026
Last update April 2, 2026

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the generateSrpArray function, resulting in full system compromise. This vulnerability can only be attacked if the attacker has some other way to write arbitrary data to the user table.

Key dates

02Disclosure timeline

April 2, 2026 CVE published
April 2, 2026 Record updated