Vulnerabilities

TI-2026-32775 CVE-2026-44900 · GHSA-g8r3-5hwf-qp96

epa4all-client: VAU Signature bypass

LOW 36

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00121 Published 2026-05-26 Fixed in 1.2.1 CWE-295

TI-2026-33323 CVE-2026-45574 · GHSA-5hhf-xmfx-4vvr

LOW 36

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00138 Published 2026-05-26 Fixed in 1.2.2 CWE-295

TI-2026-33324 CVE-2026-45575 · GHSA-gqx7-6552-67hf

LOW 33

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00118 Published 2026-05-26 Fixed in 1.2.2 CWE-347

TI-2026-35179 CVE-2026-47672 · GHSA-c82x-f4xr-qv33

LOW 28

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00162 Published 2026-05-26 No fix listed CWE-306