CVE-2026-42518
Information Disclosure Vulnerability in e-Sushrut HMIS
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript. An unauthenticated remote attacker could exploit this vulnerability by accessing the client-side code to extract sensitive information and cryptographic keys. Successful exploitation of this vulnerability could lead to exposure of sensitive data and compromise of cryptographic protections on the targeted system.
| CWE | CWE-321 |
| Vendor | cdac-noida |
| Product | e-sushrut, hospital management information system (hmis) |
| Published | Apr 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for cdac-noida e-sushrut, hospital management information system (hmis)
Be the first to know when new unknown vulnerabilities affecting cdac-noida e-sushrut, hospital management information system (hmis) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
CDAC-Noida / e-Sushrut, Hospital Management Information System (HMIS)
Previous versions
References
Credits
This vulnerability is reported by Harsh Verma