CVE-2026-14161 is a sensitive data exposure vulnerability in Advantech's Hospital Queuing Management product. It allows unauthenticated remote attackers to access a specific URL that reveals API documentation, potentially disclosing sensitive information. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact. No official fix or patch has been published yet, and the vendor has not provided remediation details. The product is not a cloud service, so remediation is expected to be managed by the user or vendor through updates.

The vulnerability allows unauthorized remote attackers to obtain sensitive information by accessing API documentation without authentication. This exposure could facilitate further attacks or information gathering. There is no indication of integrity or availability impact. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected URL and monitor for unauthorized access attempts. Follow vendor communications for updates on patches or mitigations.