Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/18 5:16 p.m.•14 views

CVE-2026-52723

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signedvauserverpubkeys and...

9.1CVSS0.00383EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/18 4:51 p.m.•52 views

CVE-2026-50578

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

7.5CVSS5.5AI score0.0031EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/18 4:51 p.m.•12 views

CVE-2026-50578 ePA 3.x Integration: TLS Certificate Verification Universally Disabled

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

7.5CVSS5.5AI score0.0031EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/18 4:50 p.m.•15 views

EUVD-2026-61055

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signedvauserverpubkeys and...

9.1CVSS5.3AI score0.00383EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•14 views

PT-2026-77221

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

7.5CVSS5.5AI score0.0031EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/12 6:52 p.m.•16 views

CVE-2026-18679 Kong Mesh: kuma-dp connects to the control plane without verifying the TLS certificate when no CA is configured

When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane connects with TLS peer verification disabled, and the dataplane authentication token is sent over that unverified connection. An on-path actor can intercept the dataplane...

5.8CVSS8.6AI score0.0035EPSS
SaveExploits0References5
Rows per page
Query Builder