{"affected":[{"defaultStatus":"unknown","packageName":"ImxTracing","product":"Infantia","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThanOrEqual":"1.3.1","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unknown","packageName":"ImxTracing","product":"Profim","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThanOrEqual":"1.3.1","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unknown","packageName":"ImxTracing","product":"Venere","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThanOrEqual":"1.3.1","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unknown","packageName":"ImxTracing","product":"Phronesis","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThanOrEqual":"1.3.1","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unknown","packageName":"cgm.it.ais.common","product":"Infantia","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThanOrEqual":"5.1.1","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unknown","packageName":"cgm.it.ais.common","product":"Profim","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThanOrEqual":"5.1.1","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unknown","packageName":"cgm.it.ais.common","product":"Venere","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThanOrEqual":"5.1.1","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unknown","packageName":"cgm.it.ais.common","product":"Phronesis","source":"CNA: ENISA","vendor":"CompuGroup Medical","versions":[{"lessThanOrEqual":"5.1.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118467","cwes":["CWE-532"],"description":"Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without adequate pseudonymization or protection.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.3,"severity":"medium","source":"CNA: ENISA","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U","version":"4.0"}],"modifiedAt":1794225403635,"publishedAt":1794225403635,"references":[{"source":"CNA: ENISA","tags":[],"url":"https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical"},{"source":"CNA: ENISA","tags":[],"url":"https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html"}],"remediation":[],"revision":"36494c2429bd4c8ff4e2c78aaa9553c3d9ca1ec2c894f5af2d70c06e0523a72e","sources":[{"modifiedAt":1794225403635,"name":"CNA: ENISA","retrievedAt":1794226127185,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118467"}],"ssvc":null,"status":"published","title":"AIS products expose clinical and personal data via logs and telemetry","updatedAt":1794226127185}