{"affected":[{"defaultStatus":"unaffected","product":"Venere","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"status":"affected","version":"8.33.2","versionType":"semver"}]}],"cveId":"CVE-2026-118450","cwes":["CWE-427"],"description":"Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create files.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.9,"severity":"medium","source":"CNA: ENISA","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","version":"4.0"}],"modifiedAt":1794224738620,"publishedAt":1794224738620,"references":[{"source":"CNA: ENISA","tags":[],"url":"https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical"},{"source":"CNA: ENISA","tags":[],"url":"https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html"}],"remediation":[],"revision":"5ff1d968180fc2ef4bafc3818e538bd238f4fe8036837ea4a81c9940f31a7413","sources":[{"modifiedAt":1794224738620,"name":"CNA: ENISA","retrievedAt":1794226105254,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118450"}],"ssvc":null,"status":"published","title":"Venere loads replaceable unsigned components from a writable installation location","updatedAt":1794226105254}