CVE-2026-102844

Name of the Vulnerable Software and Affected Versions gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8

Description A remote authorization bypass exists in the detail() function within the application/modules/admin/controllers/laporan data pasien.php file. This issue occurs when the id param argument is manipulated, allowing an attacker to bypass security checks.

Recommendations As a temporary workaround, restrict access to the detail() function in the application/modules/admin/controllers/laporan data pasien.php file or avoid using the id param argument until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.