A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as critical. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection.

This vulnerability is handled as CVE-2026-2179. The attack can be initiated remotely. Additionally, an exploit exists.