Skip to content
OpenAdvisories
Medium · 4.4 CVE-2026-118798 EUVD-2026-120033GHSA-m4gq-xxvf-7g7q

Multiple sensitive authentication data exposed

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by ENISA

Description

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise.

Affected products

VendorProductAffectedFixed
CompuGroup Medical Wingesfar < 2026.07a 2026.07a

References