E-Sushrut · E-Sushrut · CVE-2026-42518
**Name of the Vulnerable Software and Affected Versions**
e-Sushrut (affected versions not specified)
**Description**
Sensitive information and hardcoded AES (Advanced Encryption Standard, a symmetric block cipher used for encrypting and decrypting data) encryption keys are disclosed in client-side JavaScript. An unauthenticated remote attacker can access the client-side code to extract these cryptographic keys and sensitive data, potentially compromising the system's cryptographic protections.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.