Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-118459 EUVD-2026-120021GHSA-57r9-h7hp-fw88

AIS PasswordSOS permits authentication without legitimate credentials

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ENISA

Description

A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials.

Affected products

VendorProductAffectedFixed
CompuGroup Medical Infantia ≤ 5.1.1 —
CompuGroup Medical Profim ≤ 5.1.1 —
CompuGroup Medical Venere ≤ 5.1.1 —
CompuGroup Medical Phronesis ≤ 5.1.1 —

References