CVE-2026-42513
This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A remote attacker could exploit this vulnerability by intercepting and modifying the server response. Successful exploitation of this vulnerability could allow the attacker to bypass authentication and gain unauthorized access to user accounts on the targeted system.
Published:Apr 29, 2026
Last Modified:Apr 29, 2026
EPS:Apr 29, 2026
EPSS Score:
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Cdac-noida
Product
E-sushrut Hmis
Cdac-noida
E-sushrut Hmis
Vendor
Cdac-noida
Product
E-sushrut Hospital Management Information System Hmis
Cdac-noida
E-sushrut Hospital Management Information System Hmis
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
