CVE-2026-115537

The record

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function simpan of the file application/modules/admin/controllers/routing_pages.php of the component URL Validation. This manipulation of the argument url_route causes open redirect. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Affected packages

Related vulnerabilities

• CVE-2026-107020 An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader… CWE-601
• CVE-2026-118425 A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an… CWE-601
• CVE-2026-118656 Echo is a Go web framework. CWE-601
• CVE-2026-118658 Echo is a Go web framework. CWE-601
• CVE-2026-111031 The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied… CWE-601
• CVE-2026-117553 Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that… CWE-601
• CVE-2026-116578 Tornado is a Python web framework and asynchronous networking library. CWE-601
• CVE-2026-114614 Authlib is a Python library which builds OAuth and OpenID Connect servers. CWE-601