{"affected":[{"defaultStatus":"unknown","platforms":["Windows"],"product":"MAGISTRA","source":"CNA: ENISA","vendor":"GALENO SISTEMI","versions":[{"status":"affected","version":"3.12","versionType":"custom"}]}],"cveId":"CVE-2026-112168","cwes":["CWE-312","CWE-798","CWE-261","CWE-327"],"description":"The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6,"severity":"medium","source":"CNA: ENISA","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U","version":"4.0"}],"modifiedAt":1794227664511,"publishedAt":1794227664511,"references":[{"source":"CNA: ENISA","tags":["government-resource"],"url":"https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-magistra"}],"remediation":[],"revision":"69446d0e6369a2e07ef474d413f42b024eaef07e1b062a6396ed23a361fcd7c4","sources":[{"modifiedAt":1794227664511,"name":"CNA: ENISA","retrievedAt":1794229701027,"url":"https://www.cve.org/CVERecord?id=CVE-2026-112168"}],"ssvc":null,"status":"published","title":"Multiple embedded secrets and weak algorithms in Magistra","updatedAt":1794229701027}