CVE-2026-126091
iDentalSoft website information exposure
Dental practice sites hosted with iDentalSoft send a JSON response to any user who loads certain pages containing sensitive information, including OAuth credentials, password hashes, and PII. Fixed in iDentalSoft 14.0.3.
CVSS 4.0 · 8.7 High
EPSS < 1%
KEV · Not listed
Vendors
Products