Weak Custom Encryption and Outdated Compression in Magistra Software
CVE-2026-112168

6MEDIUM

Key Information:

Vendor

Galeno Sistemi

Status
Magistra
Vendor
CVE Published:
9 November 2026

What is CVE-2026-112168?

Magistra software is susceptible to vulnerabilities due to its use of weak custom encryption methods and dependence on an outdated compression algorithm to secure its database. Additionally, the software contains embedded secrets, further compromising its security posture. Organizations utilizing this software should assess their data protection measures to mitigate the potential risks associated with these weaknesses.

Affected Version(s)

MAGISTRA Windows 3.12

References

https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-i...
government-resource

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marco Sala
CSIRT-IT
ApoCert srl
.