Skip to content
OpenAdvisories
High VA-26-314-01 1 CVE

iDentalSoft website information exposure

Published Nov 13, 2026 · Updated Nov 13, 2026

Vendor: iDentalSoft Product: iDentalSoft

Summary

Dental practice sites hosted with iDentalSoft/iDentalCloud send a JSON response to any user who loads certain pages containing sensitive information, including OAuth credentials, password hashes, and PII.

Vulnerabilities 1

  • High 7.5
    CVE-2026-126091

    iDentalSoft website information exposure

    Dental practice sites hosted with iDentalSoft send a JSON response to any user who loads certain pages containing sensitive information, including OAuth credentials, password hashes, and PII. Fixed in iDentalSoft 14.0.3.

    iDentalSoft iDentalSoft

Revision history

  1. #1.0.0

    Initial publication