Skip to content
OpenAdvisories
Medium · 5.8 CVE-2026-118464 EUVD-2026-120025GHSA-r646-7c2g-jcg7

AIS shared cryptographic services use fixed cryptographic secrets

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ENISA

Description

Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields.

Affected products

VendorProductAffectedFixed
CompuGroup Medical Infantia ≤ 5.1.1 —
CompuGroup Medical Profim ≤ 5.1.1 —
CompuGroup Medical Venere ≤ 5.1.1 —
CompuGroup Medical Phronesis ≤ 5.1.1 —

References