medium5.3
CVE-2026-33617
An unauthenticated remote attacker can access a configuration file containing database credentials.
Impact
An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbconnect24 | through 2.19.4 |
| Mbconnectline | Mymbconnect24 | through 2.19.4 |