oviva-ag epa4all-client

• CVE-2026-44900 High 8.1 epa4all-client: VAU Signature bypass 0.1%
• CVE-2026-45574 High 8.1 epa4all-client: TLS Certificate Validation Disabled in Production 0.1%
• CVE-2026-45575 High 7.4 epa4all-client: Improper Verification of Cryptographic Signature 0.1%
• CVE-2026-47672 Medium 6.5 epa4all-client: Unauthenticated REST API for Patient Record Writes 0.2%