Security Advisory

CVE-2026-31071

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-19 00:00:00

Last updated 2026-05-20 13:59:58

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records (including bcrypt password hashes) via /api/user/getUserData, modify drug inventory, and access private medical prescription data via /api/doctorOder.

← Browse all CVEs View on cve.org ↗