Integrity Check Flaw in Magistra Software by ACN
CVE-2026-112170

6.3MEDIUM

Key Information:

Vendor

Galeno Sistemi

Status
Magistra
Vendor
CVE Published:
9 November 2026

What is CVE-2026-112170?

The Magistra software from ACN lacks proper integrity checks when downloading upgrade files. This vulnerability permits the installation of maliciously altered updates, potentially compromising the integrity and security of the software. Users are advised to ensure their systems are protected against potential tampering by updating to secure versions as they become available.

Affected Version(s)

MAGISTRA Windows 3.12

References

https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-i...

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marco Sala
CSIRT-IT
ApoCert srl
.