Skip to content
OpenAdvisories
High · 8.8 CVE-2026-42513 EUVD-2026-26196GHSA-9m5v-3mgc-h8pg

Authentication Bypass Vulnerability in e-Sushrut HMIS

Published Apr 29, 2026 · Updated Apr 29, 2026 · Assigned by CERT-In

Description

This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A remote attacker could exploit this vulnerability by intercepting and modifying the server response.

Successful exploitation of this vulnerability could allow the attacker to bypass authentication and gain unauthorized access to user accounts on the targeted system.

Affected products

VendorProductAffectedFixed
CDAC-Noida e-Sushrut, Hospital Management Information System (HMIS) Previous versions —

References