Description
The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GALENO SISTEMI | MAGISTRA | 3.12 | — |
Medium · 6.3
CVE-2026-112170
EUVD-2026-120041GHSA-5qh5-jfwc-v2x2
Improper verification of downloaded upgrades
Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ENISA