Is CVE-2026-77025 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-77025?

CVE-2026-77025 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-77025

Description

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentpending.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.