https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:34:01.267644+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-05601 bdu:2021-05601 2026-10-02T14:34:01.357741+00:00 bdu:2021-05601 https://cve.radiocsirt.org/vuln/euvd-2026-166425 EUVD-2026-166425 2026-10-02T14:34:01.357777+00:00 EUVD-2026-166425 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33527 fkie_cve-2021-33527 2026-10-02T14:34:01.357792+00:00

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.

 https://cve.radiocsirt.org/vuln/ghsa-hrmp-939q-g4mq GHSA-hrmp-939q-g4mq 2026-10-02T14:34:01.357824+00:00

In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM that won't be validated correctly and allows for an arbitrary code execution with the privileges of the service.

 https://cve.radiocsirt.org/vuln/gsd-2021-33527 gsd-2021-33527 2026-10-02T14:34:01.357842+00:00 gsd-2021-33527 https://cve.radiocsirt.org/vuln/vde-2021-017 VDE-2021-017 — MB connect line: Privilege escalation in mbDIALUP 2026-10-02T14:34:01.357853+00:00

Multiple Vulnerabilities in mbConnect24serv (a software service of mbDIALUP) can lead to arbitrary code execution due to improper privilege management.

Update A, 2021-11-24

corrected fixed version in solution from 3.9R0.4 to 3.9R0.5

Update B, 2022-03-28

Updated CVSS score from CVE-2021-33527 from 7.8 to 9.8 due to new information about the vulnerability

 https://cve.radiocsirt.org/vuln/vde-2021-057 VDE-2021-057 — Helmholz: Privilege Escalation in shDialup (Update A) 2026-10-02T14:34:01.357877+00:00

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service. In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service.