CVE-2026-112168 · Other
NO FIX YET
The Magistra software protects its database with custom encryption that is weak and uses an outdated compression algorithm. It also contains embedded secrets, so an attacker who obtains the code or data may be able to decrypt stored content.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
The sources do not name the affected Magistra versions or deployment conditions. Teams running Magistra to store data should check with their vendor or NVD for affected versions and whether the database protection applies to them.
Who cares magistra
Unknown from the sources.
No fix yet, per the sources.
The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.