CVE-2026-118465
Received Received - Intake

Hard-Coded Database Credentials in Shared Components

Publication date: 2026-11-09

Last updated on: 2026-11-09

Assigner: ENISA

Description
Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across installations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-09
Last Modified
2026-11-09
Generated
2026-11-09
AI Q&A
2026-11-09
EPSS Evaluated
N/A
NVD
CVE-2026-118465

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
CompuGroup Medical Infantia From 0 (inc) to 5.1.1 (inc)
CompuGroup Medical Profim From 0 (inc) to 5.1.1 (inc)
CompuGroup Medical Venere From 0 (inc) to 5.1.1 (inc)
CompuGroup Medical Phronesis From 0 (inc) to 5.1.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves shared components in certain software that contain hard-coded database credentials. These credentials are identical across all installations, meaning if one system is compromised, attackers could access other systems using the same credentials.

Impact Analysis

Attackers could exploit this to gain unauthorized access to databases, steal sensitive data, or manipulate information. Systems using affected software may face data breaches, unauthorized modifications, or service disruptions.

Compliance Impact

This vulnerability likely violates compliance requirements such as GDPR and HIPAA, which mandate strict protection of personal and health data. Organizations could face legal penalties, fines, or reputational damage due to non-compliance.

Mitigation Strategies

Immediately rotate all hard-coded database credentials across affected installations. Audit all systems using CompuGroup Medical Infantia, Profim, Venere, or Phronesis for exposed credentials. Replace with unique, strong passwords and restrict access to database configurations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-118465. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...