Description
Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CompuGroup Medical | Venere | 8.33.2 | — |
Medium · 5.9
CVE-2026-118450
EUVD-2026-120019GHSA-vwwm-jh3x-wcmw
Venere loads replaceable unsigned components from a writable installation location
Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ENISA