Vulnerabilities

TI-2026-26236 CVE-2026-33875

Authenticator Vulnerable to Authentication Flow Hijack

MEDIUM 42

Gematik Authenticator securely authenticates users for login to digital health applications.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00269 Published 2026-03-27 Fixed in 4.16.0 CWE-940

TI-2026-26235 CVE-2026-33874

LOW 36

Gematik Authenticator securely authenticates users for login to digital health applications.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00287 Published 2026-03-27 Fixed in 4.16.0 CWE-78

TI-2024-31373 CVE-2024-46984 · GHSA-68j8-fp38-p48q

MEDIUM 49

The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00637 Published 2024-09-19 Fixed in 2.5.1 CWE-611