CVE-2026-118464: AIS shared cryptographic services use fixed cryptographic secrets

Published Nov 9, 2026

Updated

Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields.

Affected Software

1 affected component

AIS shared cryptographic services

Event History

Nov 9, 2026

CVE Published

via MITRE·11:52 AM

Data Sourced

via MITRE·11:52 AM

DescriptionWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access would an attacker need to exploit this issue?

The provided vector indicates local access and low privileges are required. No user interaction is required.

What security impact could successful exploitation have?

The issue can have high impact on confidentiality and integrity. The vector does not indicate an availability impact or impact beyond the affected security authority.

Are shared secrets limited to a single type of data?

No. The affected cryptographic services protect credentials, IPC data, configuration values, and clinical fields using fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations.

CVE-2026-118464: AIS shared cryptographic services use fixed cryptographic secrets

Affected Software

Event History

Frequently Asked Questions

What access would an attacker need to exploit this issue?

What security impact could successful exploitation have?

Are shared secrets limited to a single type of data?

Company

Resources

Contact

Frequently Asked Questions

What access would an attacker need to exploit this issue?

What security impact could successful exploitation have?

Are shared secrets limited to a single type of data?