{"id":"CVE-2026-118462","published":"2026-11-09T12:16:37.130","lastModified":"2026-11-09T12:16:37.130","description":"Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-494"],"vendors":[],"products":[],"references":[{"url":"https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical","tags":[]},{"url":"https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}