https://feed.craftedsignal.io/tags/deeplink/Trending threats, MITRE ATT&CK coverage, and detection metadata — refreshed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 27 Mar 2026 21:17:24 +0000https://feed.craftedsignal.io/briefs/2026-03-gematik-auth-hijack/Fri, 27 Mar 2026 21:17:24 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-03-gematik-auth-hijack/Gematik Authenticator versions prior to 4.16.0 are vulnerable to authentication flow hijacking via malicious deep links, potentially allowing attackers to authenticate with victim user identities.<p>The Gematik Authenticator, designed for secure user authentication to digital health applications, has a critical vulnerability affecting versions prior to 4.16.0. This vulnerability, identified as CVE-2026-33875, allows for authentication flow hijacking. An attacker can exploit this by crafting a malicious deep link. If a user clicks on this link, the attacker can potentially authenticate using the identity of the victim. This poses a significant risk to user privacy and data security within…</p> criticaladvisorycve-2026-33875authentication-hijackinggematik-authenticatordeeplink