CVE-2026-112170 - Vulnerability Details - OpenCVE

The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Galeno Sistemi	Magistra

No data.

No data.

References

Link	Providers
https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-magistra

History

Mon, 09 Nov 2026 12:45:00 +0000

Type	Values Removed	Values Added
Description		The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.
Title		Improper verification of downloaded upgrades
First Time appeared		Galeno Sistemi Galeno Sistemi magistra
Weaknesses		CWE-306 CWE-427 CWE-494
CPEs		cpe:2.3:a:galeno_sistemi:magistra:3.12::windows:::::
Vendors & Products		Galeno Sistemi Galeno Sistemi magistra
References		https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-magistra
Metrics		cvssV4_0 `{'score': 6.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U'}`

MITRE

Status: PUBLISHED

Assigner: ENISA

Published: 2026-11-09T12:38:47.727Z

Updated: 2026-11-12T16:09:52.614Z

Reserved: 2026-10-19T08:06:39.208Z

Link: CVE-2026-112170

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2026-11-09T13:17:04.560

Modified: 2026-11-12T20:07:11.090

Link: CVE-2026-112170

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-112170", "assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "state": "PUBLISHED", "assignerShortName": "ENISA", "dateReserved": "2026-10-19T08:06:39.208Z", "datePublished": "2026-11-09T12:38:47.727Z", "dateUpdated": "2026-11-12T16:09:52.614Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "shortName": "ENISA", "dateUpdated": "2026-11-09T12:38:47.727Z"}, "title": "Improper verification of downloaded upgrades", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-494", "description": "CWE-494 Download of code without integrity check", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled search path element", "type": "CWE"}]}], "affected": [{"vendor": "GALENO SISTEMI", "product": "MAGISTRA", "platforms": ["Windows"], "versions": [{"status": "affected", "version": "3.12", "versionType": "custom"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div>The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.</div>"}]}], "references": [{"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-magistra"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.3, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"}}], "credits": [{"lang": "en", "value": "Marco Sala", "type": "finder"}, {"lang": "en", "value": "CSIRT-IT", "type": "coordinator"}, {"lang": "en", "value": "ApoCert srl", "type": "finder"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:galeno_sistemi:magistra:3.12:*:windows:*:*:*:*:*"}]}]}], "source": {"discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-12T16:09:40.820363Z", "id": "CVE-2026-112170", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-12T16:09:52.614Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "platforms": ["Windows"], "product": "MAGISTRA", "vendor": "GALENO SISTEMI", "versions": [{"status": "affected", "version": "3.12", "versionType": "custom"}]}], "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates."}], "id": "CVE-2026-112170", "lastModified": "2026-11-12T20:07:11.090", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-112170", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-12T16:09:40.820363Z", "version": "2.0.3"}}]}, "published": "2026-11-09T13:17:04.560", "references": [{"source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-magistra"}], "sourceIdentifier": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-427"}, {"lang": "en", "value": "CWE-494"}], "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "type": "Secondary"}]}