Advantech Hospital Queuing Mgmt APIDoc Endpoint Exposes Sensitive Data
CVE-2026-14162 Published on June 30, 2026
Advantech｜Hospital Quering Management - Missing Authentication
Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation.
Vulnerability Analysis
CVE-2026-14162 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Affected Versions
Advantech Hospital Quering Management:- Before 1.2.13 is affected.