# CompuGroup Medical vulnerabilities Source: https://junglewise.ai/threats/vendors/compugroup-medical Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/compugroup-medical.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 17 vulnerabilities in CompuGroup Medical: 16 in the last 7 days and 17 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-118798, was published on 9 November 2026. Nothing was published in the last eight weeks. 3 technologies have a page of their own. ## Counts - Last 7 days: 16 - Last 30 days: 16 - Last 90 days: 17 - All time: 17 (0 critical, 0 exploited in the wild) ## About CompuGroup Medical German software company providing healthcare and enterprise information systems. ## Latest CompuGroup Medical vulnerabilities - [CVE-2026-118798: CompuGroup Medical multiple products authentication and cryptographic vulnerabilities](https://junglewise.ai/threats/cve-2026-118798-multiple-sensitive-authentication-data-including-credentials) (info, published 9 Nov 2026) - [CVE-2026-118795: CompuGroup Medical administrative roles privilege escalation via database](https://junglewise.ai/threats/cve-2026-118795-administrative-roles-and-module-permissions-are-stored-in) (info, published 9 Nov 2026) - [CVE-2026-118792: CompuGroup Medical default credentials in AcuXDBC](https://junglewise.ai/threats/cve-2026-118792-default-credentials-permit-access-through-acuxdbc) (info, published 9 Nov 2026) - [CVE-2026-118791: CompuGroup Medical software update integrity validation bypass](https://junglewise.ai/threats/cve-2026-118791-the-application-implements-software-update-functionality-without) (info, published 9 Nov 2026) - [CVE-2026-118790: CompuGroup Medical products hardcoded credentials in administrative functions](https://junglewise.ai/threats/cve-2026-118790-multiple-hardcoded-credentials-are-embedded-within-product) (info, published 9 Nov 2026) - [CVE-2026-118468: CompuGroup Medical XML parser external entity injection](https://junglewise.ai/threats/cve-2026-118468-xml-parsers-process-attacker-influenced-update-manifests-or) (info, published 9 Nov 2026) - [CVE-2026-118467: CompuGroup Medical telemetry logging data exposure](https://junglewise.ai/threats/cve-2026-118467-shared-telemetry-and-logging-components-store-or-transmit) (info, published 9 Nov 2026) - [CVE-2026-118465: CompuGroup Medical shared components hard-coded credentials](https://junglewise.ai/threats/cve-2026-118465-shared-components-expose-hard-coded-access-workgroup-ccbasic) (info, published 9 Nov 2026) - [CVE-2026-118464: CompuGroup Medical shared cryptographic services hardcoded secrets](https://junglewise.ai/threats/cve-2026-118464-shared-cryptographic-services-use-fixed-vendor-wide-secrets) (info, published 9 Nov 2026) - [CVE-2026-118462: CompuGroup Medical update components code execution without integrity verification](https://junglewise.ai/threats/cve-2026-118462-update-components-download-and-execute-code-without-proper) (info, published 9 Nov 2026) - [CVE-2026-118461: CompuGroup Medical shared client missing authentication for read/write operations](https://junglewise.ai/threats/cve-2026-118461-the-shared-client-accepts-caller-controlled-doctor-identifiers) (info, published 9 Nov 2026) - [CVE-2026-118460: CompuGroup Medical products hardcoded cryptographic key signing arbitrary practitioner assertions](https://junglewise.ai/threats/cve-2026-118460-embedded-private-keys-protected-by-a-shared-password-can-be-used) (info, published 9 Nov 2026) - [CVE-2026-118459: CompuGroup Medical password recovery weak mechanism](https://junglewise.ai/threats/cve-2026-118459-a-time-derived-emergency-password-can-be-derived-from-publicly) (info, published 9 Nov 2026) - [CVE-2026-118458: CompuGroup Medical AIS login authentication bypass using hardcoded credentials](https://junglewise.ai/threats/cve-2026-118458-the-shared-ais-login-routing-selects-a-production-shipped-test) (info, published 9 Nov 2026) - [CVE-2026-118450: CompuGroup Medical Venere unsigned component loading in writable directory](https://junglewise.ai/threats/cve-2026-118450-venere-is-installed-outside-program-files-and-loads-registers) (info, published 9 Nov 2026) - [CVE-2026-112172: CompuGroup Medical XDent and XMedical unauthenticated SQL injection](https://junglewise.ai/threats/cve-2026-112172-cgm-xdent-and-xmedical-expose-php-synchronization-endpoints-that) (info, published 9 Nov 2026) - [CVE-2026-50773: CompuGroup Medical CGM ISIS MED DLL hijacking arbitrary code execution](https://junglewise.ai/threats/cve-2026-50773-compugroup-medical-cgm-isis-med-dll-hijacking-arbitrary-code) (high, CVSS 7.8, published 17 Aug 2026) ## Most severe CompuGroup Medical vulnerabilities - [CVE-2026-50773: CompuGroup Medical CGM ISIS MED DLL hijacking arbitrary code execution](https://junglewise.ai/threats/cve-2026-50773-compugroup-medical-cgm-isis-med-dll-hijacking-arbitrary-code) (high, CVSS 7.8, published 17 Aug 2026) - [CVE-2026-118798: CompuGroup Medical multiple products authentication and cryptographic vulnerabilities](https://junglewise.ai/threats/cve-2026-118798-multiple-sensitive-authentication-data-including-credentials) (info, published 9 Nov 2026) - [CVE-2026-118795: CompuGroup Medical administrative roles privilege escalation via database](https://junglewise.ai/threats/cve-2026-118795-administrative-roles-and-module-permissions-are-stored-in) (info, published 9 Nov 2026) - [CVE-2026-118792: CompuGroup Medical default credentials in AcuXDBC](https://junglewise.ai/threats/cve-2026-118792-default-credentials-permit-access-through-acuxdbc) (info, published 9 Nov 2026) - [CVE-2026-118791: CompuGroup Medical software update integrity validation bypass](https://junglewise.ai/threats/cve-2026-118791-the-application-implements-software-update-functionality-without) (info, published 9 Nov 2026) - [CVE-2026-118790: CompuGroup Medical products hardcoded credentials in administrative functions](https://junglewise.ai/threats/cve-2026-118790-multiple-hardcoded-credentials-are-embedded-within-product) (info, published 9 Nov 2026) - [CVE-2026-118468: CompuGroup Medical XML parser external entity injection](https://junglewise.ai/threats/cve-2026-118468-xml-parsers-process-attacker-influenced-update-manifests-or) (info, published 9 Nov 2026) - [CVE-2026-118467: CompuGroup Medical telemetry logging data exposure](https://junglewise.ai/threats/cve-2026-118467-shared-telemetry-and-logging-components-store-or-transmit) (info, published 9 Nov 2026) - [CVE-2026-118465: CompuGroup Medical shared components hard-coded credentials](https://junglewise.ai/threats/cve-2026-118465-shared-components-expose-hard-coded-access-workgroup-ccbasic) (info, published 9 Nov 2026) - [CVE-2026-118464: CompuGroup Medical shared cryptographic services hardcoded secrets](https://junglewise.ai/threats/cve-2026-118464-shared-cryptographic-services-use-fixed-vendor-wide-secrets) (info, published 9 Nov 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 16 | 0 | 0 | ## CompuGroup Medical technologies - [CompuGroup Medical WingesFar](https://junglewise.ai/threats/technologies/wingesfar): 5 vulnerabilities - [CompuGroup Medical Apodesk](https://junglewise.ai/threats/technologies/apodesk): 3 vulnerabilities - [CompuGroup Medical CGM Studio](https://junglewise.ai/threats/technologies/cgm-studio): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "CompuGroup Medical vulnerabilities", https://junglewise.ai/threats/vendors/compugroup-medical, 10 November 2026.