CVE-2026-118462

Vendor

CompuGroup Medical

Product

Infantia, Profim, Venere, Phronesis

CVSS v4.0

9.2 AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-494

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 33
   CVE NVD 1h ago

   Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums.

   Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution.

   CVSS 9.2 CVE-2026-118462 CompuGroup Medical