CVE-2026-26462

Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration

High · published May 18, 2026

CVSS v3.1
7.3
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation, allowing JavaScript executed in the renderer process to access Node.js APIs and execute arbitrary operating system commands.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Published
2026-05-18T00:00Z
EPSS history
Timeline
  • 18 MAY 00:00Z
    Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration
    cvelistv5