CVE-2026-115536

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element is the function simpan of the file application/modules/admin/controllers/routing_pages.php of the component Admin Routing Page. The manipulation of the argument content results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-79
• CWE-94

• https://github.com/gedelumbung/HospitalManagement/
• https://github.com/gedelumbung/HospitalManagement/issues/16
• https://vuldb.com/cve/CVE-2026-115536
• https://vuldb.com/submit/1021800
• https://vuldb.com/vuln/425389
• https://vuldb.com/vuln/425389/cti

Published

Oct 23, 2026

Last Modified

Oct 23, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-115517Unrestricted network access between execution contexts in KN…6.4
• CVE-2026-115519Missing security attributes on sensitive cookies in KNIME Bu…2.1
• CVE-2026-11552A vulnerability has been found in SourceCodester Onlne Exami…5.5
• CVE-2026-11553A vulnerability was found in Tenda HG7, HG9 and HG10 3000011…8.8
• CVE-2026-115534A vulnerability was determined in gedelumbung HospitalManage…4.3
• CVE-2026-115535A vulnerability was identified in gedelumbung HospitalManage…2.4
• CVE-2026-115537A weakness has been identified in gedelumbung HospitalManage…4.3
• CVE-2026-11554A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747…4.3
• CVE-2026-11555A vulnerability was identified in D-Link DGS-1100-08PD 1.00.…7.5
• CVE-2026-11556A security flaw has been discovered in Tenda F451 1.0.0.7/1.…8.8
• CVE-2026-11557A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9…8.8
• CVE-2026-11558A security vulnerability has been detected in CodeAstro Payr…6.3