Med-united vulnerabilities
We track 2 vulnerabilities in Med-united products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 24, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Med-united vulnerabilities
- 8.1 High severity
epa4all: Improper Certificate Validation
In epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all and any backend (ePA Aktensystem, Konnektor, IDP, TSS) can present a self-signed TLS certificate and intercept the connection. For non-VAU connections (Konnektor, IDP), th
- 9.1 Critical severity
epa4all: Improper Certificate Validation
In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic (patient c