Hardcoded Credentials Found in Compugroup Medical Products
CVE-2026-118790

7.2HIGH

Key Information:

Vendor

Compugroup Medical

Status
Wingesfar
Vendor
CVE Published:
9 November 2026

What is CVE-2026-118790?

Multiple hardcoded credentials are embedded within various components and administrative functionalities of Compugroup Medical products. These hardcoded credentials present a risk by allowing unauthorized access to privileged accounts, services, and features across affected deployments, potentially compromising user security and data integrity.

Affected Version(s)

Wingesfar 0 < 2026.07a

References

https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-i...
https://www.cgm.com/ita_it/magazine/articles/comunicati-s...

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marco Sala
CSIRT-IT
ApoCert srl
.