Quick answers
- Is CVE-2026-118791 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-118791 being exploited in the wild.
- How severe is CVE-2026-118791?
- Informational severity, published 9 November 2026.
- Which products and versions are affected?
- CompuGroup Medical Pharmacy And Medical Practice Management Software multiple products affected; see vendor advisory for product-specific versions.
- Is there a fix for CVE-2026-118791?
- A patch was published on 2026-11-04: updates distributed automatically to all affected installations Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-118791 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-118791?
- Check whether you run CompuGroup Medical Pharmacy And Medical Practice Management Software at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This is a "Download of Code Without Integrity Check" vulnerability in the software update procedure of CompuGroup Medical healthcare management systems. The update mechanism accepts packages without sufficient cryptographic verification of authenticity and integrity, allowing an attacker with network access to inject malicious update payloads. Exploitation requires specific network conditions (such as man-in-the-middle capability) but results in arbitrary code execution with system privileges.
Affected products
- CompuGroup Medical pharmacy and medical practice management software multiple products affected; see vendor advisory for product-specific versions
Timeline
- 2026-11-04: disclosed
- 2026-11-04: patched: updates distributed automatically to all affected installations