Skip to content
OpenAdvisories
High · 7.2 CVE-2026-118791 EUVD-2026-120030GHSA-43cf-6fxq-3qw6

Insecure software update mechanism

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ENISA

Description

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification.

Affected products

VendorProductAffectedFixed
CompuGroup Medical Wingesfar < 10.2.1 10.2.1

References