Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-112171

SQL injection vulnerability in Magistra software

An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data.

CVSS 4.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Galeno Sistemi
Products
Magistra
CVE-2026-112170

Improper verification of downloaded upgrades

The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Galeno Sistemi
Products
Magistra
CVE-2026-112169

Undocumented backdoor allows authentication bypass in Magistra software

Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification.

CVSS 4.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Galeno Sistemi
Products
Magistra
CVE-2026-112168

Multiple embedded secrets and weak algorithms in Magistra

The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Galeno Sistemi
Products
Magistra