CVE-2026-118791

UNKNOWN 0.0

Insecure software update mechanism

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification.

CWE	CWE-494
Vendor	compugroup medical
Product	wingesfar
Published	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for compugroup medical wingesfar

Be the first to know when new unknown vulnerabilities affecting compugroup medical wingesfar are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

CompuGroup Medical / Wingesfar

0 < 10.2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

acn.gov.it: https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical cgm.com: https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html

Credits

Marco Sala CSIRT-IT ApoCert srl