Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation, allowing JavaScript executed in the renderer process to access Node.js APIs and execute arbitrary operating system commands.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 18 May 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Code Execution via Electron Misconfiguration in Offline Hospital Management System | |
| Weaknesses | CWE-78 |
Mon, 18 May 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation, allowing JavaScript executed in the renderer process to access Node.js APIs and execute arbitrary operating system commands. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-05-18T14:03:16.036Z
Reserved: 2026-02-16T00:00:00.000Z
Link: CVE-2026-26462
No data.
Status : Received
Published: 2026-05-18T15:16:25.230
Modified: 2026-05-18T15:16:25.230
Link: CVE-2026-26462
No data.
OpenCVE Enrichment
Updated: 2026-05-18T15:30:28Z
Weaknesses