What is CVE-2026-75086?
A critical SQL injection vulnerability has been discovered in itsourcecode Hospital Management System 1.0. The unvalidated 'delid' parameter in the '/viewroom.php' file allows remote code execution. Organizations using this system should immediately implement input validation or await a patch from the vendor.
Azərbaycanca: itsourcecode Hospital Management System 1.0 proqramında kritik bir SQL injection zəifliyi aşkar edilib. `/viewroom.php` faylındakı `delid` parametrinin yoxlanılmaması uzaqdan kod icrasına imkan yaradır. Bu sistemdən istifadə edən təşkilatlar dərhal giriş validasiyası tətbiq etməli və ya istehsalçıdan yamaq gözləməlidir.
Related CVEs
link basis: same weakness class CWE-89; shared vendor: itsourcecode
FAQ2
Which version of itsourcecode Hospital Management System is affected by CVE-2026-75086?
CVE-2026-75086 affects itsourcecode Hospital Management System version 1.0.
What measures should be taken to prevent exploitation of CVE-2026-75086?
Organizations should immediately implement input validation or await a patch from the vendor.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.