PT-2026-43414 · Unknown · Epa4All-Client

Chiara Fliegner + 4 · Published 2026-05-26 · Updated 2026-06-04 · CVE-2026-47672

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions epa4all-client versions prior to 1.2.5

Description Any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In misconfigured deployments, such as those following the production Docker example in the README, this can be exploited from the local network without credentials.

Recommendations Update to version 1.2.5. Use network policies or proxies to enforce service-to-service authentication via mTLS (Mutual Transport Layer Security), which is a process where both parties in a communication link authenticate each other. Run the service in an isolated network namespace, such as a Kubernetes sidecar. Implement a service-mesh with corresponding policies.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-47672

GHSA-C82X-F4XR-QV33

Affected Products

Epa4All-Client

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47672.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-47672 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c82x-f4xr-qv33 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47672 · Security Note
• https://github.com/oviva-ag/epa4all-client/security/advisories/GHSA-c82x-f4xr-qv33 · Note
• https://github.com/oviva-ag/epa4all-client · Note
• https://github.com/oviva-ag/epa4all-client/pull/43 · Note