← Vulnerability feed

Vulnerability record · CVE-2026-33875 · published 27 March 2026

CVE-2026-33875: Gematik authenticator vulnerability

Gematik · Authenticator

Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click on a malicious deep link. Update Gematik Authenticator to version 4.16.0 or greater to receive a patch. There are no known workarounds.

9.3 CVSS 3.1 Critical EPSS 0.47% · top 62.2% CWE-940 · CWE-940
9.3CVSS 3.1 base score
0.47%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click on a malicious deep link. Update Gematik Authenticator to version 4.16.0 or greater to receive a patch. There are no known workarounds.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/gematik/app-Authenticator/security/advisories/GHSA-qg87-cf56-2rmr Vendor Advisory
https://www.machinespirits.com/advisory/f41e56/

Track CVE-2026-33875 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2026-33874Gematik authenticator os command injection vulnerabilityGematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0 and prior to version 4.16.0, …EPSS 0.31%9.3CVE-2025-61932Lanscope Endpoint Manager improper origin verification allows RCELanscope Endpoint Manager (On-Premises), in both the Client program (MR) and Detection agent (DA), does not properly verify the origin of incoming re…KEVEPSS 2.8%analysed

Source: NIST National Vulnerability Database (record CVE-2026-33875), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.