PT-2026-41301 · Unknown · Medical Management System

Published 2026-05-15 · Updated 2026-05-15 · CVE-2025-67437

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Medical Management System a81df1ce700a9662cb136b27af47f4cbde64156b (affected versions not specified)

Description Insecure Permissions allow for the reset of arbitrary user passwords.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-67437

Affected Products

Medical Management System

References · 4

• 🔥 https://github.com/wxhlcy/cve/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-67437 · Security Note
• https://gitee.com/ljt12343/report/issues/IDB6P8 · Note
• https://t.me/CVEtracker/53919 · Telegram Post