CVE-2026-42513

Authentication Bypass Vulnerability in e-Sushrut HMIS

High · published April 29, 2026

CVSS v4.0
8.8
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A remote attacker could exploit this vulnerability by intercepting and modifying the server response.

Successful exploitation of this vulnerability could allow the attacker to bypass authentication and gain unauthorized access to user accounts on the targeted system.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00772 · 55.2th percentile
Published
2026-04-29T08:13Z
EPSS history
Timeline
  • 29 APR 08:13Z
    Authentication Bypass Vulnerability in e-Sushrut HMIS
    cvelistv5