Is CVE-2026-85398 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85398?

CVE-2026-85398 has a CVSS v3 severity of HIGH (7.3).

Back

CVE-2026-85398

Description

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.