CVE-2026-102846

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-102846
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102846.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-102846
Published
2026-09-30T01:45:20Z
Modified
2026-10-08T02:49:15Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
gedelumbung HospitalManagement Configuration sistem.php simpan improper authorization
Details

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument tipe/title/content_setting results in improper authorization. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102846.json"
}
References

Affected packages

Git / github.com/gedelumbung/hospitalmanagement

Affected ranges

Type
GIT
Repo
https://github.com/gedelumbung/hospitalmanagement
Events
Introduced
c2d45543789a3887067d3915f69d44cfc2cf76a8
Last Affected
c2d45543789a3887067d3915f69d44cfc2cf76a8

Affected versions

Other
c2d45543789a3887067d3915f69d44cfc2cf76a8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102846.json"