CVE-2026-60045

Arbitrary file upload in web interface

medium · 6.9

Fix listed

MB Connect Line mbCONNECT24

Published Nov 10, 2026, 08:38 UTC

Description

A high privileged remote attacker can upload arbitrary files to a guessable location. This can result in a loss of availability and might be chained with other vulnerabilities.

Reported fixed versions

2.21.0

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.