CVE-2026-33875

Gematik Authenticator (software component for digital health login) is affected. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing an attacker to authenticate as a victim who clicks a malicious deep link. Root cause is not explicitly detailed beyond th...

CVE-2026-33874

The issue concerns the Mac OS version of the gematik Authenticator. From version 4.12.0 up to, but not including, 4.16.0, it is affected by a remote code execution vulnerability triggered when a user opens a malicious file. The vulnerability’s impact is rated high with local access and user inter...