CVE-2026-115537

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function simpan of the file application/modules/admin/controllers/routing_pages.php of the component URL Validation. This manipulation of the argument url_route causes open redirect. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-601

• https://github.com/gedelumbung/HospitalManagement/
• https://github.com/gedelumbung/HospitalManagement/issues/17
• https://vuldb.com/cve/CVE-2026-115537
• https://vuldb.com/submit/1021801
• https://vuldb.com/vuln/425390
• https://vuldb.com/vuln/425390/cti

Published

Oct 23, 2026

Last Modified

Oct 23, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-115519Missing security attributes on sensitive cookies in KNIME Bu…2.1
• CVE-2026-11552A vulnerability has been found in SourceCodester Onlne Exami…5.5
• CVE-2026-11553A vulnerability was found in Tenda HG7, HG9 and HG10 3000011…8.8
• CVE-2026-115534A vulnerability was determined in gedelumbung HospitalManage…4.3
• CVE-2026-115535A vulnerability was identified in gedelumbung HospitalManage…2.4
• CVE-2026-115536A security flaw has been discovered in gedelumbung HospitalM…4.3
• CVE-2026-11554A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747…4.3
• CVE-2026-11555A vulnerability was identified in D-Link DGS-1100-08PD 1.00.…7.5
• CVE-2026-11556A security flaw has been discovered in Tenda F451 1.0.0.7/1.…8.8
• CVE-2026-11557A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9…8.8
• CVE-2026-11558A security vulnerability has been detected in CodeAstro Payr…6.3
• CVE-2026-11559A vulnerability was detected in CodeAstro Payroll System 1.0…6.3