---
id: CVE-2026-102846
title: >-
  gedelumbung HospitalManagement Configuration sistem.php simpan improper
  authorization
summary: >-
  A vulnerability was detected in gedelumbung HospitalManagement up to
  c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function
  sistem.php::simpan of the file
  application/modules/admin/controllers/sistem.php of the component Conf…
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-285
  - CWE-266
vendor: gedelumbung
product: HospitalManagement
affected:
  - HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8
published: '2026-09-30'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T01:45:20.309Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-102846'
references:
  - url: 'https://vuldb.com/vuln/411505'
    label: >-
      VDB-411505 | gedelumbung HospitalManagement Configuration sistem.php
      simpan improper authorization
  - url: 'https://vuldb.com/vuln/411505/cti'
    label: 'VDB-411505 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-102846'
    label: CVE-2026-102846 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/946242'
    label: >-
      Submit #946242 | gedelumbung HospitalManagement
      c2d45543789a3887067d3915f69d44cfc2cf76a8 Improper Authorization
  - url: 'https://github.com/gedelumbung/HospitalManagement/issues/12'
  - url: 'https://github.com/gedelumbung/HospitalManagement/'
tags:
  - cve.org
ingestedAt: '2026-09-30T01:54:42.729Z'
---

## Overview

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument tipe/title/content_setting results in improper authorization. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `HospitalManagement c2d45543789a3887067d3915f69d44cfc2cf76a8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.