CVE-2026-118458

UNKNOWN 0.0

AIS shared test login provider contains fixed administrative credentials

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The shared AIS login routing selects a production-shipped test DAO and plaintext comparison for the H and V application codes, accepting fixed administrator accounts.

CWE	CWE-798
Vendor	compugroup medical
Product	phronesis
Published	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for compugroup medical phronesis

Be the first to know when new unknown vulnerabilities affecting compugroup medical phronesis are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

CompuGroup Medical / Phronesis

0 ≤ 5.1.15.1.1

CompuGroup Medical / Venere

0 ≤ 5.1.15.1.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

acn.gov.it: https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical cgm.com: https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html

Credits

Marco Sala CSIRT-IT ApoCert srl