CVE-2026-42516CWE-639

Broken Access Control Vulnerability in e-Sushrut HMIS

High · published April 29, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated attacker could exploit this vulnerability by manipulating encoded parameters in the request URL to gain unauthorized access to patient accounts on the targeted system.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00351 · 27.5th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-04-29T08:26Z
EPSS history
Timeline
  • 29 APR 08:26Z
    Broken Access Control Vulnerability in e-Sushrut HMIS
    cvelistv5