# CVE-2026-118790: CompuGroup Medical products hardcoded credentials in administrative functions

Source: https://junglewise.ai/threats/cve-2026-118790-multiple-hardcoded-credentials-are-embedded-within-product  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-09. Updated: 2026-11-09  
License: CC BY 4.0 with a link back

CVE-2026-118790 · Severity: info · Published 2026-11-09

CompuGroup Medical software used by pharmacies and medical practices contains hardcoded administrative credentials embedded in product components. An unauthenticated attacker could exploit these credentials to gain unauthorized access to privileged accounts and administrative functionalities across affected healthcare deployments, potentially compromising patient data and system integrity.

Technologies: [CompuGroup Medical Apodesk](https://junglewise.ai/threats/technologies/apodesk), [CompuGroup Medical WingesFar](https://junglewise.ai/threats/technologies/wingesfar). Vendors: [CompuGroup Medical](https://junglewise.ai/threats/vendors/compugroup-medical).

## Quick answers

**Is CVE-2026-118790 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-118790 being exploited in the wild.

**How severe is CVE-2026-118790?** Informational severity, published 9 November 2026.

**Which products and versions are affected?** CompuGroup Medical Apodesk <UNKNOWN>; CompuGroup Medical IGEA <UNKNOWN>; CompuGroup Medical STUDIO <UNKNOWN>; CompuGroup Medical WingesFar <UNKNOWN>.

**Is there a fix for CVE-2026-118790?** A patch was published on 2026-11-04: Patches distributed automatically to all installations Until you apply it: Ensure all systems are running the latest automatic patches distributed by CompuGroup Medical. Restrict network access to administrative interfaces and monitor for suspicious authentication attempts using hardcoded credentials. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-118790 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-118790?** Check whether you run CompuGroup Medical Apodesk, CompuGroup Medical IGEA, CompuGroup Medical STUDIO or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Ensure all systems are running the latest automatic patches distributed by CompuGroup Medical. Restrict network access to administrative interfaces and monitor for suspicious authentication attempts using hardcoded credentials.

## Technical details

CVE-2026-118790 involves hardcoded default credentials integrated into CompuGroup Medical product components and administrative functionalities. An unauthenticated remote attacker under specific conditions could exploit these credentials to access unauthorized privileged accounts and administrative features. The vulnerability enables authentication bypass to systems managing healthcare data, potentially allowing access to patient information and critical healthcare delivery systems.

## Affected products

- CompuGroup Medical STUDIO <UNKNOWN>
- CompuGroup Medical IGEA <UNKNOWN>
- CompuGroup Medical WINGESFAR <UNKNOWN>
- CompuGroup Medical APODESK <UNKNOWN>

## Timeline

- 2026-11-04: disclosed
- 2026-11-04: patched: Patches distributed automatically to all installations

## References

- [https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical](https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical)
- [https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html](https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html)

## Related threats

- [CompuGroup Medical multiple products authentication and cryptographic vulnerabilities](https://junglewise.ai/threats/cve-2026-118798-multiple-sensitive-authentication-data-including-credentials)
- [CompuGroup Medical telemetry logging data exposure](https://junglewise.ai/threats/cve-2026-118467-shared-telemetry-and-logging-components-store-or-transmit)
- [CompuGroup Medical shared client missing authentication for read/write operations](https://junglewise.ai/threats/cve-2026-118461-the-shared-client-accepts-caller-controlled-doctor-identifiers)
- [CompuGroup Medical AIS login authentication bypass using hardcoded credentials](https://junglewise.ai/threats/cve-2026-118458-the-shared-ais-login-routing-selects-a-production-shipped-test)