CVE-2026-90983

Summary

The Hayat Mobile application contains a client-side authentication vulnerability that allows attackers to bypass authentication mechanisms and gain unauthorized access to healthcare services. This flaw enables unauthenticated users to access sensitive patient data and hospital systems.

Exploitability

Exploitation is relatively straightforward as it requires only client-side modifications to bypass authentication checks, with no additional prerequisites needed.

Blast radius

The vulnerability could impact all users of Hayat Mobile versions 3.3.0 through 3.3.9, potentially exposing sensitive patient health records and hospital administrative systems to unauthorized access.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Hayat Mobile version 3.4.0 or later to remediate the client-side authentication bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.