Authentication Bypass Vulnerability in Magistra Software by ACN
CVE-2026-112169

6.1MEDIUM

Key Information:

Vendor

Galeno Sistemi

Status
Magistra
Vendor
CVE Published:
9 November 2026

What is CVE-2026-112169?

Magistra software presents a significant vulnerability by incorporating undocumented backdoor functionality that facilitates authentication bypass. This flaw allows attackers to create a privileged user account without requiring any credential verification, potentially compromising system integrity and security. It is crucial for users of Magistra to assess their exposure to this vulnerability and implement appropriate security measures.

Affected Version(s)

MAGISTRA Windows 3.12

References

https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-i...
government-resource

CVSS V4

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marco Sala
CSIRT-IT
ApoCert srl
.