CVE-2026-42513: falha de alta gravidade em CDAC-Noida e-Sushrut, Hospital Management…
Authentication Bypass Vulnerability in e-Sushrut HMIS
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.5%
This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A remote attacker could exploit this vulnerability by intercepting and modifying the server response.
Successful exploitation of this vulnerability could allow the attacker to bypass authentication and gain unauthorized access to user accounts on the targeted system.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
CVEs relacionadas — CDAC-Noida e-Sushrut, Hospital Management…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-42514HIGHSensitive Data Exposure Vulnerability in e-Sushrut HMISEPSS 0.2%CVE-2026-42517HIGHCryptographic Failure Vulnerability in e-Sushrut HMISEPSS 0.2%CVE-2026-42516HIGHBroken Access Control Vulnerability in e-Sushrut HMISEPSS 0.2%CVE-2026-42515HIGHInsecure Direct Object Reference (IDOR) Vulnerability in e-Sushrut HMISEPSS 0.2%CVE-2026-42518HIGHInformation Disclosure Vulnerability in e-Sushrut HMISEPSS 0.2%