E-sushrut Hmis CVEs and Security Vulnerabilities

CVE-2026-42513

Authentication Bypass Vulnerability in e-Sushrut HMIS

This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A remote attacker could exploit this vulnerability by intercepting and modifying the server response. Successful exploitation of this vulnerability could allow the attacker to bypass authentication and gain unauthorized access to user accounts on the targeted system.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Cdac-noida

Products

E-sushrut Hmis E-sushrut Hospital Management Information System Hmis

CVE-2026-42515

Insecure Direct Object Reference (IDOR) Vulnerability in e-Sushrut HMIS

This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive information of patients on the targeted system.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed