CVE-2026-5960

MediumCVSS 4.3/10Last modified Oct 26, 2026

Description

A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200CWE-284

Affected software

VendorProductVersions
code-projectsPatient Record Management System1.0

References

Timeline

Published
Apr 9, 2026
Last modified
Oct 26, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-596015.3In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remCVE-2026-596037.5In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retCVE-2026-596046.2In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead CVE-2026-596066.7In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a permissiCVE-2026-596077.8In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code. This cCVE-2026-596087.8In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalaCVE-2026-596098.4In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use afCVE-2026-59617.3A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This vulnerability affects unknown code of the fCVE-2026-596117.5In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input vCVE-2026-596127.8In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalatiCVE-2026-596137.5In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input validaCVE-2026-59614In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a m
CVE-2026-5960: Medium severity, CVSS 4.3 | Vulnix