CVE-2026-104638

Published 2 October 2026 · tracked since 3 October 2026

Description

A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitation o

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-103622 HIGH 8.8
• CVE-2026-103625 HIGH 8.8
• CVE-2026-90970 CRITICAL 9.9
• CVE-2026-39600 MEDIUM 4.7
• CVE-2026-104625 MEDIUM 6.3
• CVE-2026-104637 HIGH 7.3
• CVE-2026-93875 HIGH 7.2
• CVE-2026-19652 CRITICAL 9.8
• CVE-2026-104613 MEDIUM 6.3
• CVE-2026-104614 MEDIUM 6.3

→ Open the live CVE board · all tools