CVE-2026-115535

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Settings Handler. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-79
• CWE-94

• https://github.com/gedelumbung/HospitalManagement/
• https://github.com/gedelumbung/HospitalManagement/issues/15
• https://vuldb.com/cve/CVE-2026-115535
• https://vuldb.com/submit/1021799
• https://vuldb.com/vuln/425388
• https://vuldb.com/vuln/425388/cti

Published

Oct 23, 2026

Last Modified

Oct 23, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-115516An incorrect authorization issue exposes basic account infor…6.9
• CVE-2026-115517Unrestricted network access between execution contexts in KN…6.4
• CVE-2026-115519Missing security attributes on sensitive cookies in KNIME Bu…2.1
• CVE-2026-11552A vulnerability has been found in SourceCodester Onlne Exami…5.5
• CVE-2026-11553A vulnerability was found in Tenda HG7, HG9 and HG10 3000011…8.8
• CVE-2026-115534A vulnerability was determined in gedelumbung HospitalManage…4.3
• CVE-2026-11554A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747…4.3
• CVE-2026-11555A vulnerability was identified in D-Link DGS-1100-08PD 1.00.…7.5
• CVE-2026-11556A security flaw has been discovered in Tenda F451 1.0.0.7/1.…8.8
• CVE-2026-11557A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9…8.8
• CVE-2026-11558A security vulnerability has been detected in CodeAstro Payr…6.3
• CVE-2026-11559A vulnerability was detected in CodeAstro Payroll System 1.0…6.3