CVE-2026-112169

CVSS 6.1 (medium) · published 2026-11-09

Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification.

Weakness: CWE-288, CWE-912

Source: NVD CVE-2026-112169

References

• https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-magistra

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.