GHSA-57r9-h7hp-fw88Medium
A time-derived emergency password can be derived from publicly available application code,...
🔗 CVE IDs covered (1)
📋 Description
A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials.
🔗 References (4)
- https://nvd.nist.gov/vuln/detail/CVE-2026-118459
- https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical
- https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html
- https://github.com/advisories/GHSA-57r9-h7hp-fw88