CVE-2026-33874

• Gematik/Authenticator

  cpe:2.3:a:gematik:authenticator:*:*:*:*:*:*:*:*

  Range: >=4.12.0,<4.16.0

No patches discovered yet.

AI mechanics synthesis has not run for this CVE yet.

• github.com/gematik/app-Authenticator/security/advisories/GHSA-mjgm-7hwc-qqcrnvdVendor Advisory
• www.machinespirits.de/advisory/2e655e/nvd

• Millions of students&#8217; personal data stolen in major education breach
  Malwarebytes Labs · May 6, 2026
• From Stuxnet to ChatGPT: 20 News Events That Shaped Cyber
  Dark Reading · May 6, 2026
• Attacks Abuse Windows Phone Link to Steal Texts & Bypass 2FA
  Dark Reading · May 6, 2026
• Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails
  Infosecurity Magazine · May 5, 2026
• CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs
  BleepingComputer · May 5, 2026
• CloudZ RAT potentially steals OTP messages using Pheno plugin
  Cisco Talos Intelligence · May 5, 2026
• ⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More
  The Hacker News · Apr 27, 2026
• Passkeys are more secure than traditional ways to log in
  NCSC UK · Apr 23, 2026
• Vercel Confirms Cyber Incident After Sophisticated Attacker Exploits Third‑Party Tool
  Infosecurity Magazine · Apr 21, 2026
• ZDI-26-239: (Pwn2Own) QNAP QHora-322 login.newAuthMiddleware.Authenticator Authentication Bypass Vulnerability
  Zero Day Initiative · Mar 30, 2026
• Move fast and save things: A quick guide to recovering a hacked account
  ESET WeLiveSecurity · Mar 20, 2026