fbeta-GmbH vulnerabilities
We track 3 vulnerabilities in fbeta-GmbH products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2026.
Latest fbeta-GmbH vulnerabilities
- 9.1 Critical severity
ePA3-Service-OpenSource: Improper Certificate Validation
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring
- 7.5 High severity
ePA3-Service-OpenSource: Improper Certificate Validation
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.
- 7.4 High severity
ePA3-Service-OpenSource: Reusing a Nonce, Key Pair in Encryption
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves request_counter unchanged in app/vau/VAUProtokoll.py while constructing VAU mess