Missing Authorization Vulnerability in KiviCare Clinic Management System by Iqonic Design

CVE-2026-25034

What is CVE-2026-25034?

The KiviCare clinic management system from Iqonic Design is susceptible to a missing authorization vulnerability, which arises from incorrectly configured access control mechanisms. This flaw allows an attacker to exploit inadequate security settings, potentially granting unauthorized access to sensitive areas of the application, thereby compromising patient data and operational integrity. Users of versions up to and including 3.6.16 should take immediate action to mitigate this vulnerability.

References