PT-2026-28546 · Unknown · Gematik Authenticator

Dr. Simon Weber + 1 · Publicado 2026-03-27 · Atualizado 2026-03-29 · CVE-2026-33875

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Gematik Authenticator versions prior to 4.16.0

Description Gematik Authenticator is used to securely authenticate users for login to digital health applications. Versions prior to 4.16.0 are susceptible to authentication flow hijacking. An attacker could potentially authenticate as a victim user if the user clicks on a malicious deep link.

Recommendations Update Gematik Authenticator to version 4.16.0 or greater.

Exploit

Correção

Enumeração de Fraquezas

CWE-940

Identificadores relacionados

CVE-2026-33875

GHSA-QG87-CF56-2RMR

Produtos afetados

Gematik Authenticator

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33875.json · Exploit
• https://github.com/gematik/app-Authenticator/security/advisories/GHSA-qg87-cf56-2rmr · Aviso do Fabricante
• https://twitter.com/0dayPublishing/status/2037630570625106166 · Publicação no Twitter
• https://machinespirits.com/advisory/f41e56 · Nota
• https://twitter.com/CVEnew/status/2037719398266618243 · Publicação no Twitter
• https://twitter.com/CosmicBytez/status/2038115365247697023 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2037650842552250767 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2037646546984951914 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-33875 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-33875 · Aviso do Fabricante