Skip to content
OpenAdvisories
Medium · 5.8 CVE-2026-118465 EUVD-2026-120026GHSA-4vj2-9mfw-mppf

AIS products use vendor-wide hard-coded database credentials

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ENISA

Vendor: CompuGroup Medical Product: Infantia Product: Phronesis Product: Profim Product: Venere

Description

Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across installations.

Affected products

VendorProductAffectedFixed
CompuGroup Medical Infantia ≤ 5.1.1 —
CompuGroup Medical Profim ≤ 5.1.1 —
CompuGroup Medical Venere ≤ 5.1.1 —
CompuGroup Medical Phronesis ≤ 5.1.1 —

References