Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation, allowing JavaScript executed in the renderer process to access Node.js APIs and execute arbitrary operating system commands.
Project Subscriptions
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 19 May 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Sourceforge
Sourceforge offline Hospital Management System |
|
| Vendors & Products |
Sourceforge
Sourceforge offline Hospital Management System |
Mon, 18 May 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Code Execution via Electron Misconfiguration in Offline Hospital Management System | |
| Weaknesses | CWE-78 |
Mon, 18 May 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation, allowing JavaScript executed in the renderer process to access Node.js APIs and execute arbitrary operating system commands. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-05-18T14:03:16.036Z
Reserved: 2026-02-16T00:00:00.000Z
Link: CVE-2026-26462
No data.
Status : Deferred
Published: 2026-05-18T15:16:25.230
Modified: 2026-05-18T17:44:03.697
Link: CVE-2026-26462
No data.
OpenCVE Enrichment
Updated: 2026-05-19T08:19:10Z
Weaknesses