CVE-2026-11763
MediumCVSS 6.5Summary
An authorization bypass vulnerability in GisLab Laboratory Management System allows exploitation of user-controlled keys. This flaw enables attackers to misuse trusted identifiers, potentially gaining unauthorized access.
Risk Assessment
The organization faces the risk of unauthorized access to sensitive laboratory data and potential data manipulation, compromising system confidentiality and integrity.
Recommendation
Immediately update GisLab Laboratory Management System to a version later than 08072026. Implement server-side identifier validation mechanisms.
Other vulnerabilities in GisLab Laboratory Management System
See all- CVE-2026-9166High
A path traversal vulnerability exists in GIS Informatics GisLab Laboratory Management System due to improper limitation of a pathname to a restricted directory. The issue affects versions from 1.4.03 before 1.5.
- CVE-2026-9163Critical
GIS Informatics GisLab Laboratory Management System versions from 1.4.03 before 1.5 contain an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. The flaw allows injection of malicious SQL code.
- CVE-2026-8297Critical
An SQL injection vulnerability has been discovered in GisLab Laboratory Management System due to improper neutralization of special elements in SQL commands. The flaw affects versions from 1.4.03 through 08072026.
Original NVD description (English source)
Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows Exploitation of Trusted Identifiers. This issue affects GisLab Laboratory Management System: from 1.4.03 through 08072026.