CVE-2026-4617

5.5 mediumEPSS 0.4%

Medium (5.5). EPSS 0.4% chance of exploitation in the next 30 days.

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/api_patient_checkin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-285
Published: 2026-03-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://gist.github.com/HxH404/0ab53ccba44456b5400a5908414f5ab1
https://vuldb.com/?ctiid.352481
https://vuldb.com/?id.352481
https://vuldb.com/?submit.775747
https://www.sourcecodester.com/

Check your stack JSON