What’s Vulnerable › Vulnerabilities

CVE-2026-4617: SourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorization

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-24 · updated 2026-06-17
• Weakness: CWE-266

Description

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/api_patient_checkin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

• SourceCodester Patients Waiting Area Queue Management System: 1.0

References

• https://gist.github.com/HxH404/0ab53ccba44456b5400a5908414f5ab1
• https://vuldb.com/?ctiid.352481
• https://vuldb.com/?id.352481
• https://vuldb.com/?submit.775747
• https://www.sourcecodester.com/

Get alerted when CVE-2026-4617 or the next vulnerability affects your stack