Open Redirect Vulnerability in gedelumbung HospitalManagement URL Validation
CVE-2026-115537

5.3MEDIUM

Key Information:

Vendor: Gedelumbung
Status: Hospitalmanagement
Vendor: CVE Published:; 23 October 2026

🔔 Create Gedelumbung Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-115537?

A vulnerability has been detected in gedelumbung HospitalManagement that compromises the URL validation mechanism within the 'simpan' function of the routing_pages.php controller. This flaw allows an attacker to manipulate the URL routing argument, potentially leading to open redirect scenarios. Such exploitation can be carried out remotely, posing significant risks to the web application's integrity. Despite the early notification of this issue to the project maintainers via an issue report, response actions have yet to be taken, and the exploit details are now publicly accessible.

Affected Version(s)

HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-115537 - Proof of Concept