CVE-2026-82181

MediumCVSS 5.5

Published: 28/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

The Medical Practice Management System developed by Le-yan has a sensitive data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files.

Risk Assessment

The risk includes leakage of patient medical and personal data, potentially violating privacy and regulatory compliance.

Recommendation

Recommend changing the mechanism of passing data in URLs to safer methods such as POST or sessions, and educating users about clearing browser history.

Other vulnerabilities in Medical Practice Management System

CVE-2026-78685High
Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commands via a crafted HTML page.

Original NVD description (English source)

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files.