Asseco
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| InfoMedica Plus | 2 | – | Jan 8, 2026 |
| proCertum SmartSign | 2 | – | Jul 27, 2026 |
| AMDX | 1 | – | Jan 8, 2026 |
Exploited and recent CVEs
- CVE-2026-57917 Improper Restriction of XML External Entity Reference in proCertum SmartSign 0.2%
- CVE-2026-57916 Arbitrary Path Execution via CPS URI in proCertum SmartSign 0.1%
- CVE-2025-4596 Information disclosure via IDOR in Asseco AMDX 0.3%
- CVE-2025-8307 Recoverable passwords in Asseco Infomedica Plus 0.1%
- CVE-2025-8306 Improper Access Control in Asseco Infomedica Plus 0.2%