Is there a public PoC exploit available for CVE-2026-14774?

Yes, a public proof-of-concept exploit is available for CVE-2026-14774. Prioritise patching immediately. EPSS: 0.2%.

Hospital Management System CVE-2026-14774

Q: What is the CVSS score of CVE-2026-14774?

CVE-2026-14774 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-41789 LOW

SQL Injection (CWE-89)

2026-07-05 VulDB

GHSA-rcpp-gchp-592g

SQLi PHP Hospital Management System

2.1

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

2.1 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.3 MEDIUM

Network-accessible web endpoint requires a low-privilege authenticated session (PR:L); standard SQLi with no scope change yields limited and symmetric C/I/A impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Jul 05, 2026 - 23:22 NVD

MEDIUM LOW

CVSS changed

Jul 05, 2026 - 23:22 NVD

5.3 (MEDIUM) 2.1 (LOW)

Severity Changed

Jul 05, 2026 - 23:22 NVD

MEDIUM LOW

CVSS changed

Jul 05, 2026 - 23:22 NVD

5.3 (MEDIUM) 2.1 (LOW)

Analysis Generated

Jul 05, 2026 - 23:19 vuln.today

DescriptionCVE.org

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

SQL injection in itsourcecode Hospital Management System 1.0 exposes the /paymentdischarge.php endpoint to database manipulation via the unsanitized patientid parameter. Low-privileged authenticated attackers can exploit this remotely with no user interaction required, achieving limited read, write, and availability impact against the underlying database. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Obtain or guess HMS user credentials

Delivery

Authenticate to web application

Exploit

Submit crafted patientid to /paymentdischarge.php

Execution

SQL payload executes in database context

Impact

Read or modify patient and billing records

Access

Obtain or guess HMS user credentials

Delivery

Authenticate to web application

Exploit

Submit crafted patientid to /paymentdischarge.php

Execution

SQL payload executes in database context

Impact

Read or modify patient and billing records

Vulnerability AssessmentAI

Exploitation	Exploitation requires a valid, low-privileged user account within the Hospital Management System, as confirmed by the CVSS PR:L metric. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) rates this Medium at 5.3, reflecting straightforward network exploitation at low complexity, but bounded by a low-privilege authentication requirement (PR:L) and limited per-category impact (VC:L/VI:L/VA:L with no scope change to subsequent systems). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker who has obtained or guessed a low-privileged user account on the Hospital Management System submits a crafted HTTP request to `/paymentdischarge.php?patientid=1'%20UNION%20SELECT%20...` or equivalent SQLi payload. The unparameterized PHP backend passes the injected value directly to the database engine, allowing the attacker to enumerate patient records, billing data, or credentials stored in the database. …
Remediation	No vendor-released patch has been identified at time of analysis - the vendor site (https://itsourcecode.com/) should be monitored for any updated release. … Detailed patch versions, workarounds, and compensating controls in full report.