Authenticator vulnerabilities

2 known vulnerabilities in Authenticator from Gematik. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  app-Authenticator: Improper Verification of Source of a Communication Channel

  CVE-2026-33875Mar 27, 2026Gematik

  Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click

• 7.8 High severity

  app-Authenticator: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-33874Mar 27, 2026Gematik

  Gematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0 and prior to version 4.16.0, the Mac OS version of the Authenticator is vulnerable to remote code execution, triggered when victims open a m