MajorCritical vulnerability

CVE-2026-90983 (CVSS 8.2)

NVD · officialPublished Oct 9, 2026Risk 37/100

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0.

Technical details

CVSS

8.2

AV:NetworkAC:LowPR:NoneUI:NoneC:HighI:LowA:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source