Emergency Password Vulnerability in Compugroup Medical Software
CVE-2026-118459

6.3MEDIUM

Key Information:

Vendor

Compugroup Medical

Status
Infantia
Profim
Venere
Phronesis
Vendor
CVE Published:
9 November 2026

What is CVE-2026-118459?

A notable vulnerability allows for the derivation of time-based emergency passwords from publicly accessible application code within Compugroup Medical software. This flaw enables unauthorized authentication, compromising the security of user accounts and sensitive data. Organizations utilizing this software should assess their security posture and implement necessary measures to mitigate risks associated with this vulnerability.

Affected Version(s)

Infantia 0 <= 5.1.1

Phronesis 0 <= 5.1.1

Profim 0 <= 5.1.1

References

https://www.cgm.com/ita_it/magazine/articles/comunicati-s...
https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-i...

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marco Sala
CSIRT-IT
ApoCert srl
.