{"affected":[{"defaultStatus":"unknown","platforms":["Windows"],"product":"MAGISTRA","source":"CNA: ENISA","vendor":"GALENO SISTEMI","versions":[{"status":"affected","version":"3.12","versionType":"custom"}]}],"cveId":"CVE-2026-112169","cwes":["CWE-288","CWE-912"],"description":"Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.1,"severity":"medium","source":"CNA: ENISA","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","version":"4.0"}],"modifiedAt":1794227813055,"publishedAt":1794227813055,"references":[{"source":"CNA: ENISA","tags":["government-resource"],"url":"https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-magistra"}],"remediation":[],"revision":"29528a243c41cfe673e6c59ac003b8a61cf5de542a206b9df129b695ff647114","sources":[{"modifiedAt":1794227813055,"name":"CNA: ENISA","retrievedAt":1794229702389,"url":"https://www.cve.org/CVERecord?id=CVE-2026-112169"}],"ssvc":null,"status":"published","title":"Undocumented backdoor allows authentication bypass in Magistra software","updatedAt":1794229702389}