Authenticator

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gematik:authenticator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGematik (795ec95c-5075-5105-9dc4-c3946fb7e35d)
ProductAuthenticator (25743be6-1eeb-5b66-b87f-a1591590d513)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gematik/app-authenticator purl2cpe 2026-06-01 10:15:55.079100

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-33875 vulnerable 2026-06-08 07:59:11.556858 Authenticator Vulnerable to Authentication Flow Hijack
CRITICAL (9.3)
Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click on a malicious deep link. Update Gematik Authenticator to version 4.16.0 or greater to receive a patch. There are no known workarounds.
Published: 2026-03-27T20:25:15.850Z
Updated: 2026-04-03T15:21:15.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33874 vulnerable 2026-06-08 07:59:11.556357 Authenticator vulnerable to Remote Code Execution
HIGH (7.8)
Gematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0 and prior to version 4.16.0, the Mac OS version of the Authenticator is vulnerable to remote code execution, triggered when victims open a malicious file. Update the gematik Authenticator to version 4.16.0 or greater to receive a patch. There are no known workarounds.
Published: 2026-03-27T20:23:53.402Z
Updated: 2026-04-21T18:53:38.805Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.