PT-2026-61545 · Mb Connect Line+1 · Mbconnect24+2

CVE-2026-14448 · Publicado 2026-07-20 · Atualizado 2026-07-20

NVD

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system certificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-14448

Produtos afetados

Mbconnect24

Myrex24V2

Myrex24V2.Virtual

Referências · 3

• https://certvde.com/en/advisories/VDE-2026-058 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14448 · Nota de Segurança
• https://certvde.com/en/advisories/VDE-2026-044 · Nota