Authentication Vulnerability in Compugroup Medical Software

CVE-2026-118460

What is CVE-2026-118460?

Compugroup Medical's software presents a significant security risk through improperly secured embedded private keys. These keys, protected only by a shared password, can be exploited to sign practitioner assertions for any practitioner identifier. This flaw enables unauthorized token requests, putting sensitive information at risk and allowing potential malicious activities against practitioner accounts. It underscores the importance of utilizing robust cryptographic practices to secure private keys and to ensure proper authentication mechanisms are in place.

References