---
id: "CVE-2026-118464"
page: "https://infrastack.ai/live/CVE-2026-118464"
kind: "vulnerability"
aliases: ["CVE-2026-118464"]
title: "Shared crypto services use fixed vendor-wide secrets and reversible transforms"
severity: "medium"
cvss: 5.8
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["clinical-software", "healthcare", "other"]
not_affected_if: []
published_at: "2026-11-09T12:16:37+00:00"
first_seen_at: "2026-11-09T12:26:23+00:00"
updated_at: "2026-11-09T12:27:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118464", "first_seen_at": "2026-11-09T12:26:23+00:00"}]
exploit_sources: []
---

# Shared crypto services use fixed vendor-wide secrets and reversible transforms

Link for people: https://infrastack.ai/live/CVE-2026-118464 (this .md is for agents)

Shared cryptographic services use fixed secrets common to a whole vendor, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields. An attacker who obtains one copy of the shared secret or the code can decrypt or reverse protected values across deployments.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-09T12:26:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118464

## From the sources

Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_