Medium 4.3

Shared telemetry and logging components store or transmit patient and doctor identifiers,...

CVE-2026-118467 First seen on SecPulse Nov 9, 20:56

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
CompuGroup Medical	CompuGroup MedicalInfantia	≤ 5.1.1→ Not listed	Not listed
CompuGroup Medical	CompuGroup MedicalProfim	≤ 5.1.1→ Not listed	Not listed
CompuGroup Medical	CompuGroup MedicalVenere	≤ 5.1.1→ Not listed	Not listed
CompuGroup Medical	CompuGroup MedicalPhronesis	≤ 5.1.1→ Not listed	Not listed

This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.

Original description The description as published by the source.

Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without adequate pseudonymization or protection.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v4: Medium 4.3; CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
Published: Nov 9, 2026
First seen on SecPulse: Nov 9, 20:56
GHSA: GHSA-3jw5-w6q7-rw7g
CWE: CWE-532

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-532

All

Compugroup Medical Infantia Profim Venere Phronesis

Detection sources

NIST National Vulnerability DatabaseNov 9, 21:16
GitHub Security Advisories (Global)Nov 9, 21:31
CVE.org (CVE Program・cvelistV5)Nov 9, 20:56