Back to CVE List

CVE-2026-26462

HIGH SEVERITY

CVSS Score & Metrics

Base Score
7.3 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Vulnerability Description

Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation, allowing JavaScript executed in the renderer process to access Node.js APIs and execute arbitrary operating system commands.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-917
Source
NVD

External References

Discussion (0)

Add Comment

No comments yet. Be the first!