Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Infantia — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Infantia, with AI-generated Chinese analysis, references, and POCs.

Vendor: CompuGroup Medical

CVE ID Title CVSS Severity Published
CVE-2026-118795 AIS stores authorization state in locally modifiable databases CWE-602 5.9 Medium 2026-11-09
CVE-2026-118468 AIS XML parsers allow external entity resolution CWE-611 7.2 High 2026-11-09
CVE-2026-118467 AIS products expose clinical and personal data via logs and telemetry CWE-532 4.3 Medium 2026-11-09
CVE-2026-118465 AIS products use vendor-wide hard-coded database credentials CWE-798 5.8 Medium 2026-11-09
CVE-2026-118464 AIS shared cryptographic services use fixed cryptographic secrets CWE-321 5.8 Medium 2026-11-09
CVE-2026-118462 AIS update mechanism executes unverified code CWE-494 9.2 Critical 2026-11-09
CVE-2026-118461 AIS PersonnelService client performs unauthenticated doctor-specific operations CWE-306 8.0 High 2026-11-09
CVE-2026-118460 AIS embedded private keys enable practitioner impersonation CWE-321 8.0 High 2026-11-09
CVE-2026-118459 AIS PasswordSOS permits authentication without legitimate credentials CWE-640 6.3 Medium 2026-11-09

All 9 known CVE vulnerabilities affecting Infantia with full Chinese analysis, references, and POCs where available.