VYPR
← All advisories
Critical severity9.3NVD Advisory· Published Mar 27, 2026· Updated Apr 3, 2026

CVE-2026-33875

CVE-2026-33875

Description

Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click on a malicious deep link. Update Gematik Authenticator to version 4.16.0 or greater to receive a patch. There are no known workarounds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Gematik/Authenticator2 versions
    cpe:2.3:a:gematik:authenticator:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gematik:authenticator:*:*:*:*:*:*:*:*range: <4.16.0
    • (no CPE)range: <4.16.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.