Beveiligingsadvies

CVE-2026-31071

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-19 00:00:00

Laatst bijgewerkt 2026-05-20 13:59:58

Toegewezen door mitre

CVSS-score 9.1

Status PUBLISHED

Beschrijving

API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records (including bcrypt password hashes) via /api/user/getUserData, modify drug inventory, and access private medical prescription data via /api/doctorOder.

← Alle CVE's bekijken Bekijk op cve.org ↗