Galeno Sistemi Magistra
4 CVEs affecting Galeno Sistemi Magistra. Latest disclosed: 2026-11-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-112171 | | 2026-11-09 | An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data. | |
CVE-2026-112170 | | 2026-11-09 | The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates. | |
CVE-2026-112169 | | 2026-11-09 | Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credenti… | |
CVE-2026-112168 | | 2026-11-09 | The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets. |