CVE-2026-118467
AIS products expose clinical and personal data via logs and telemetry
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without adequate pseudonymization or protection.
| CWE | CWE-532 |
| Vendor | compugroup medical |
| Product | infantia |
| Published | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for compugroup medical infantia
Be the first to know when new unknown vulnerabilities affecting compugroup medical infantia are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
CompuGroup Medical / Infantia
0 ≤ 1.3.1
CompuGroup Medical / Profim
0 ≤ 1.3.1
CompuGroup Medical / Venere
0 ≤ 1.3.1
CompuGroup Medical / Phronesis
0 ≤ 1.3.1
CompuGroup Medical / Infantia
0 ≤ 5.1.1
CompuGroup Medical / Profim
0 ≤ 5.1.1
CompuGroup Medical / Venere
0 ≤ 5.1.1
CompuGroup Medical / Phronesis
0 ≤ 5.1.1
References
acn.gov.it: https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical cgm.com: https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html
Credits
Marco Sala CSIRT-IT ApoCert srl