CVE-2026-48021

Name of the Vulnerable Software and Affected Versions epa4all versions prior to 2026-05-20

Description An attacker capable of intercepting the TLS connection between the application and the ePA backend can complete the VAU handshake using attacker-controlled keys to obtain session encryption keys. This allows the attacker to read and modify all inner HTTP traffic, including medication data, patient consent decisions, document operations, entitlement queries, and authorization tokens. Additionally, the attacker can inject arbitrary requests through the hijacked channel.

Recommendations Update to version 2026-05-20.