EUVD-2026-61055Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
On-path MITM position is a condition outside the attacker's control, so AC:H; no credentials needed once positioned (PR:N); full read/modify of VAU traffic gives C:H/I:H, no availability impact (A:N).
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
4DescriptionCVE.org
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signed_vau_server_pub_keys and AUT_VAU_CertData certificate path to independent trusted material. A network-positioned attacker between the DiGA backend and the ePA system can intercept the VAU handshake, supply attacker-controlled certificate and key material, and satisfy the circular trust relationship. Because TLS certificate verification is also disabled in affected versions, no independent server-authentication layer prevents the attack. The attacker can impersonate the VAU server, control the negotiated session keys, and read or modify all encrypted VAU traffic. This issue is fixed in version 1.3.0.
AnalysisAI
TLS/VAU man-in-the-middle in fbeta GmbH's ePA 3.x Integration (ePA3-Service-OpenSource) before 1.3.0 lets an on-path attacker impersonate the VAU server for Germany's electronic patient record (ePA). Because app/vau/VAUProtokoll.py validates the signed_vau_server_pub_keys and AUT_VAU_CertData chain against attacker-suppliable material (a circular trust relationship) and TLS certificate verification is additionally disabled, an attacker between the DiGA backend and the ePA system can negotiate the session keys and read or alter all encrypted VAU traffic, including Medical Information Objects. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an active on-path (man-in-the-middle) position between the DiGA backend and the ePA system so the attacker can intercept the VAU handshake and serve attacker-controlled certificate/key material to the /CertData endpoint; exploitation succeeds only against versions before 1.3.0, where VAUProtokoll.py anchors trust to server-supplied material and TLS certificate verification is disabled. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are largely consistent for a high-priority integrity/confidentiality issue but with an important nuance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: 1.3.0 - upgrade the ePA3-Service-OpenSource connector to release 1.3.0 or later (https://github.com/fbeta-GmbH/ePA3-Service-OpenSource/releases/tag/1.3.0), which adds anchored VAU certificate validation via the new validator.VAUCertificateValidator and TI_PKI_ROOTS_DIR. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems using ePA3-Service-OpenSource prior to version 1.3.0 and assess production exposure; contact fbeta GmbH to confirm patch timelines. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Epa3 Service Opensource
View allTLS certificate verification is globally disabled in fbeta-GmbH's ePA3-Service-OpenSource prior to version 1.3.0, exposi
AES-GCM nonce reuse in ePA3-Service-OpenSource (all versions prior to 1.3.0) allows a network-positioned attacker to rec
CRLF injection in ePA 3.x Integration's VAU inner HTTP request builder allows an authenticated attacker to inject arbitr
Same weakness CWE-295 – Improper Certificate Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today