PT-2026-43414 · Oviva Ag · Epa4All-Client

Chiara Fliegner + 4 · Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-47672

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In a misconfigured deployment (e.g., following the production Docker example in the README), this is exploitable from the local network without credentials.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-47672

Affected Products

Epa4All-Client

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-47672 · Security Note
• https://github.com/oviva-ag/epa4all-client/security/advisories/GHSA-c82x-f4xr-qv33 · Note
• https://github.com/oviva-ag/epa4all-client/pull/43 · Note