CVE-2026-90983CWE-603

CVE-2026-90983

High · published October 9, 2026

CVSS v3.1

8.2

EPSS

0%

Percentile

16.8

In the wild

Unconfirmed

What it is

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Authentication Bypass.

This issue affects Hayat Mobile: from 3.3.0 before 3.4.0.

The record

Technical detail

CVSS v3.1: 8.2 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00260 · 16.8th percentile
Weakness: CWE-603 · Use of Client-Side Authentication
Published: 2026-10-09T20:17Z

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1289 · [email protected]

EPSS history

Timeline

11 OCT 03:32Z
EPSS moved — → 0%
epss
09 OCT 15:22Z
OTP Code Exposure in Hayat Hospital's Hayat Mobile
cvelistv5
09 OCT 15:22Z
OTP Code Exposure in Hayat Hospital's Hayat Mobile
cvelistv5