Skip to content
OpenAdvisories
High · 8.1 CVE-2026-118458 EUVD-2026-120020GHSA-q79g-wr42-5523

AIS shared test login provider contains fixed administrative credentials

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ENISA

Description

The shared AIS login routing selects a production-shipped test DAO and plaintext comparison for the H and V application codes, accepting fixed administrator accounts.

Affected products

VendorProductAffectedFixed
CompuGroup Medical Phronesis ≤ 5.1.15.1.1 —
CompuGroup Medical Venere ≤ 5.1.15.1.1 —

References