Skip to content
OpenAdvisories

Vendor

gematik

3 known vulnerabilities.

Products

app-Authenticator 2 app-referencevalidator 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-33874

    Authenticator vulnerable to Remote Code Execution

    Gematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0 and prior to version 4.16.0, the Mac OS version of the Authenticator is vulnerable to remote code execution, triggered when victims open a …

    gematik app-Authenticator
  • High 8.6
    CVE-2024-46984

    XML External Entity Reference (XXE) vulnerability can lead to a Server Side Request Forgery attack in gematik app-referencevalidator

    The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards. The profile location routine in the referencevalidator commons package is vulnerable to `XML External Entities` attack due t…

    gematik app-referencevalidator de.gematik.refv.commons:commons Maven