Vendor
Compugroup Medical
17 known vulnerabilities in products by Compugroup Medical, 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-112172 | Unauthenticated SQL Execution in XDent/XMedical Synchronization Infrastructure | — | |
| Critical | CVE-2026-118462 | AIS update mechanism executes unverified code | — | |
| High | CVE-2026-118461 | AIS PersonnelService client performs unauthenticated doctor-specific operations | — | |
| High | CVE-2026-118458 | AIS shared test login provider contains fixed administrative credentials | — | |
| High | CVE-2026-118460 | AIS embedded private keys enable practitioner impersonation | — | |
| High | CVE-2026-118790 | Multiple Hardcoded Credentials | — | |
| High | CVE-2026-118468 | AIS XML parsers allow external entity resolution | — | |
| Medium | CVE-2026-118459 | AIS PasswordSOS permits authentication without legitimate credentials | — | |
| High | CVE-2026-118791 | Insecure software update mechanism | — | |
| Medium | CVE-2026-118792 | Default ODBC credentials | — | |
| Medium | CVE-2026-118795 | AIS stores authorization state in locally modifiable databases | — | |
| Medium | CVE-2026-118450 | Venere loads replaceable unsigned components from a writable installation location | — | |
| Medium | CVE-2026-118465 | AIS products use vendor-wide hard-coded database credentials | — | |
| Medium | CVE-2026-118464 | AIS shared cryptographic services use fixed cryptographic secrets | — | |
| High | CVE-2025-48981 | CompuGroup Medical CGM MEDICO: security vulnerability | 8.6 | |
| Medium | CVE-2026-118798 | Multiple sensitive authentication data exposed | — | |
| Medium | CVE-2026-118467 | AIS products expose clinical and personal data via logs and telemetry | — |