CVE-2026-42515 | BDVDB-2026-329658 Detail
CDAC-Noidae-Sushrut, Hospital Management Information System (HMIS)
Description#
This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive information of patients on the targeted system.
Impact#
CAPEC-566 Authorization Bypass Through Parameter Manipulation
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.