Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-118467 EUVD-2026-120027GHSA-3jw5-w6q7-rw7g

AIS products expose clinical and personal data via logs and telemetry

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ENISA

Description

Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without adequate pseudonymization or protection.

Affected products

VendorProductAffectedFixed
CompuGroup Medical Infantia ≤ 1.3.1, ≤ 5.1.1 —
CompuGroup Medical Profim ≤ 1.3.1, ≤ 5.1.1 —
CompuGroup Medical Venere ≤ 1.3.1, ≤ 5.1.1 —
CompuGroup Medical Phronesis ≤ 1.3.1, ≤ 5.1.1 —

References