Vulnerability in Cdac-noida E-sushrut, Hospital Management Information System (Hmis)
CVE-2026-42518
This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript. An unauthenticated remote attacker could exploit this vulnerability by accessing the client-side…
EPSS: 0.001 (24.1th percentile) — read the EPSS interpretation.
Affected products
- Cdac-noida E-sushrut, Hospital Management Information System (Hmis) — versions Previous versions
Weakness classification (CWE)
References
- vdisclose@cert-in.org.in (third-party-advisory)