Authentication Bypass via Hardcoded Admin Credentials

Executive Summary

CVE-2026-118458 is a vulnerability where the shared AIS login routing system incorrectly selects a production test DAO and uses plaintext comparison for application codes H and V. This allows fixed administrator accounts to be accepted without proper authentication.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to authenticate as an administrator without valid credentials, gaining privileged access to the system. This could lead to unauthorized data access, modification, or system control in environments using affected CompuGroup Medical software.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate compliance with GDPR and HIPAA by enabling unauthorized access to sensitive health data. Unauthorized administrative access risks breaches of confidentiality, integrity, and availability requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update the affected CompuGroup Medical software products through official vendor channels to apply the security patches distributed automatically.

Useful 0 Not Useful 0