GALENO SISTEMI
Vulnerability activity for GALENO SISTEMI: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 4.4MediumNov 9, 2026GALENO SISTEMI MAGISTRA SQL injectionCVE-2026-112171An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data.
- 6.3MediumNov 9, 2026GALENO SISTEMI MAGISTRA Auth bypass / access controlCVE-2026-112170The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.
- 6.1MediumNov 9, 2026GALENO SISTEMI MAGISTRA Auth bypass / access controlCVE-2026-112169Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification.
- 6.0MediumNov 9, 2026GALENO SISTEMI MAGISTRACVE-2026-112168The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.
Top products
- MAGISTRA4 CVEs in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- ENISA EUVD · Nov 9, 2026EUVD-2026-120040 · Magistra software contains undocumented backdoor functionality that allows authentication bypass and the…CVE-2026-112169
- ENISA EUVD · Nov 9, 2026EUVD-2026-120039 · The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect…CVE-2026-112168
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.