CVE-2026-118795

— UNSCORED

Published 2026-11-09 · Updated 2026-11-09

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access.

Weaknesses

CWE-602

All references

https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical
https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100306PoC
UNSCOREDCVE-2026-110314PoC
MEDIUMCVE-2026-112369
MEDIUMCVE-2026-116605PoC
MEDIUMCVE-2026-117554PoC
MEDIUMCVE-2026-119746
UNSCOREDCVE-2026-122148
MEDIUMCVE-2026-126085PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.