Unauthorized Access Vulnerability in e-Sushrut by e-Sushrut Technologies
CVE-2026-42516

7.1HIGH

Key Information:

Vendor

Cdac-noida

Status
E-sushrut, Hospital Management Information System (hmis)
Vendor
CVE Published:
29 April 2026

What is CVE-2026-42516?

This vulnerability is found in e-Sushrut software, stemming from inadequate authorization checks during resource access. An authenticated attacker can exploit this issue by altering encoded parameters in the request URL, facilitating unauthorized access to sensitive patient accounts within the targeted system. This poses significant security risks, as it could lead to unauthorized data exposure and potential breaches of patient confidentiality.

Affected Version(s)

e-Sushrut, Hospital Management Information System (HMIS) Previous versions

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOT...
third-party-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability is reported by Harsh Verma
.