MajorCritical vulnerability

CVE-2026-118461 (CVSS 8.0)

NVD · officialPublished Nov 9, 2026Risk 37/100

The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credentials.

Technical details

CVSS

8.0

AV:NetworkAC:LowPR:NoneUI:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source