Skip to content
OpenAdvisories

Vendor

fbeta-GmbH

4 known vulnerabilities.

Products

ePA3-Service-OpenSource 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2026-50577

    ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter

    ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves request_counter unchanged in app/vau/VAUProtokoll.py while constructing VAU mes…

    fbeta-GmbH ePA3-Service-OpenSource
  • High 7.5
    CVE-2026-50578

    ePA 3.x Integration: TLS Certificate Verification Universally Disabled

    ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll…

    fbeta-GmbH ePA3-Service-OpenSource