CVE-2026-1550CWE-266CWE-285

PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization

Medium · published January 28, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00403 · 33.4th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-285 · Improper Authorization
Published
2026-01-28T23:02Z
EPSS history
Timeline
  • 28 JAN 23:02Z
    PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization
    cvelistv5