Description
Dental practice sites hosted with iDentalSoft send a JSON response to any user who loads certain pages containing sensitive information, including OAuth credentials, password hashes, and PII. Fixed in iDentalSoft 14.0.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| iDentalSoft | iDentalSoft | < 14.0.3 | 14.0.3 |
Advisories 1
- VA-26-314-01 iDentalSoft website information exposure CISA ICS & IT advisories · Nov 13, 2026