Inadequate Integrity and Authenticity Checks in Compugroup Medical Software
CVE-2026-118791

7.2HIGH

Key Information:

Status
Vendor
CVE Published:
9 November 2026

What is CVE-2026-118791?

A vulnerability has been identified in Compugroup Medical software where the update functionality fails to implement adequate authenticity and integrity verification measures. This allows update packages to be processed without sufficient cryptographic checks, potentially enabling unauthorized modifications to be accepted by the application. Users of this software should be aware of the risks associated with unverified updates and take necessary precautions.

Affected Version(s)

Wingesfar 0 < 10.2.1

References

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marco Sala
CSIRT-IT
ApoCert srl
.