Vulnerability in Compugroup Medical's Telemetry and Logging Components
CVE-2026-118467

4.3MEDIUM

Key Information:

Vendor

Compugroup Medical

Status
Infantia
Profim
Venere
Phronesis
Vendor
CVE Published:
9 November 2026

What is CVE-2026-118467?

The vulnerability involves inadequate pseudonymization and protection of sensitive information within telemetry and logging components offered by Compugroup Medical. This issue permits the storage and transmission of identifiable patient and doctor information, as well as clinical data, which poses significant risks to privacy. Urgent remediation is essential to prevent unauthorized access to sensitive healthcare information.

Affected Version(s)

Infantia 0 <= 1.3.1

Infantia 0 <= 5.1.1

Phronesis 0 <= 1.3.1

References

https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-i...
https://www.cgm.com/ita_it/magazine/articles/comunicati-s...

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marco Sala
CSIRT-IT
ApoCert srl
.