Information Disclosure Vulnerability in Gedelumbung HospitalManagement by Gedelumbung
CVE-2026-102845

6.9MEDIUM

Key Information:

Vendor: Gedelumbung
Status: Hospitalmanagement
Vendor: CVE Published:; 30 September 2026

🔔 Create Gedelumbung Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-102845?

An information disclosure vulnerability has been identified in the Gedelumbung HospitalManagement product, specifically affecting the error_reporting function in the index.php file related to HTTP Response management. This flaw potentially allows attackers to gain unauthorized access to sensitive system information. As the vulnerability can be exploited remotely, it presents a significant security risk. Despite the project team being informed of the issue through an early report, no fixes or public responses have been issued as of now. Users are advised to remain vigilant and take precautionary measures.

Affected Version(s)

HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-102845 - Proof of Concept