CVE-2026-102846

Name of the Vulnerable Software and Affected Versions gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8

Description An improper authorization issue exists in the Configuration Handler component. A remote attacker can manipulate the tipe, title, or content setting arguments within the simpan() function of the application/modules/admin/controllers/sistem.php file to bypass authorization controls.

Recommendations As a temporary workaround, restrict access to the simpan() function in the application/modules/admin/controllers/sistem.php file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.