Product by Compugroup Medical
Venere
11 known vulnerabilities in Venere (Compugroup Medical), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-118462 | AIS update mechanism executes unverified code | — | |
| High | CVE-2026-118461 | AIS PersonnelService client performs unauthenticated doctor-specific operations | — | |
| High | CVE-2026-118458 | AIS shared test login provider contains fixed administrative credentials | — | |
| High | CVE-2026-118460 | AIS embedded private keys enable practitioner impersonation | — | |
| High | CVE-2026-118468 | AIS XML parsers allow external entity resolution | — | |
| Medium | CVE-2026-118459 | AIS PasswordSOS permits authentication without legitimate credentials | — | |
| Medium | CVE-2026-118795 | AIS stores authorization state in locally modifiable databases | — | |
| Medium | CVE-2026-118450 | Venere loads replaceable unsigned components from a writable installation location | — | |
| Medium | CVE-2026-118465 | AIS products use vendor-wide hard-coded database credentials | — | |
| Medium | CVE-2026-118464 | AIS shared cryptographic services use fixed cryptographic secrets | — | |
| Medium | CVE-2026-118467 | AIS products expose clinical and personal data via logs and telemetry | — |