{"affected":[{"defaultStatus":"unaffected","product":"XDent","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThan":"4.4.0","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"XMedical","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThan":"4.4.0","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-112172","cwes":["CWE-89"],"description":"CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables and execute arbitrary SQL queries against backend MySQL databases.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.1,"severity":"high","source":"CNA: ENISA","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y","version":"4.0"}],"modifiedAt":1794224711226,"publishedAt":1794224298744,"references":[{"source":"CNA: ENISA","tags":["government-resource"],"url":"https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical"},{"source":"CNA: ENISA","tags":["government-resource"],"url":"https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html"}],"remediation":[],"revision":"b460812e5e6bfea34203b09e2b8d0803f99321d6c30f37b8d24613d43b0b7e9b","sources":[{"modifiedAt":1794224711226,"name":"CNA: ENISA","retrievedAt":1794226098640,"url":"https://www.cve.org/CVERecord?id=CVE-2026-112172"}],"ssvc":null,"status":"published","title":"Unauthenticated SQL Execution in XDent/XMedical Synchronization Infrastructure","updatedAt":1794226098640}