Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing attackers to authenticate with the identities of victim users who click on a malicious deep link. Update Gematik Authenticator to version 4.16.0 or greater to receive a patch. There are no known workarounds.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-27 | 3 | Disclosure2Patch1 |
| 2026-03-28 | 1 | Disclosure1 |
| 2026-03-29 | 1 | Disclosure1 |
Security Advisory: CVE-2026-33875 — Gematik Authenticator Authentication Flow Hijacking (CVSS 9.3) https://labs.cosmicbytez.ca/security/cve-2026-33875 #Cybersecurity #InfoSec #CVE #PatchNow
Post summary
The advisory announces CVE-2026-33875 as an authentication flow hijacking vulnerability in Gematik Authenticator with a high CVSS score, but it does not provide PoC, exploit code, active exploitation evidence, or patch details.
CVE-2026-33875 Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking,… https://www.cve.org/CVERecord?id=CVE-2026-33875
Post summary
CVE‑2026‑33875 is disclosed, indicating that Gematik Authenticator versions prior to 4.16.0 are vulnerable to authentication flow hijacking, with no PoC, exploit, or patch details provided.
🔴 CVE-2026-33875 - Critical Gematik Authenticator securely authenticates users for login to digital health applications. Versions prior to 4.16.0 are vulnerable to authentication flow hijacking, potentially allowing... https://www.thehackerwire.com/vulnerability/CVE-2026-33875/ https://t.co/SflLmdvjiB
Post summary
The tweet announces CVE‑2026‑33875 as a critical authentication flow hijacking vulnerability in Gematik Authenticator versions below 4.16.0, providing basic technical details but lacking any PoC, exploit, active exploitation claim, or patch information.
[CVE-2026-33875: CRITICAL] Update Gematik Authenticator to version 4.16.0 to fix vulnerability allowing authentication flow hijacking. Protect your digital health applications from potential cyber attacks.#cve,CVE-2026-33875,#cybersecurity https://cvefind.com/CVE-2026-33875
Post summary
The advisory recommends updating to Gematik Authenticator 4.16.0 to patch a critical authentication flow hijacking vulnerability. No PoC, exploit code, or active exploitation evidence is mentioned.
🚨 CVE-2026-33875: Authenticator Vulnerable to Auth... Deep link hijacking healthcare auth with 9.3 CVSS - one malicious URL click = full identity takeover in German health e... https://zerodaysignal.com/vulnerability/CVE-2026-33875 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE-2026-33875, a 9.3‑scored vulnerability in a healthcare authenticator that allows full identity takeover via a single malicious deep link, with no PoC, tool, patch, or active exploitation reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gematik | authenticator | - | - | - |