The vulnerability CVE-2026-7631 affects the Registration Handler component of code-projects Online Hospital Management System 1.0. It arises from improper authorization controls when processing the Username argument, allowing an attacker with low privileges to remotely manipulate authorization checks. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no user interaction, and limited impact on confidentiality, integrity, and availability. The vulnerability has been publicly disclosed but lacks an official fix or patch at this time.

Successful exploitation could allow an attacker to bypass authorization controls remotely, potentially gaining unauthorized access or performing actions beyond their privileges. The impact is limited to the extent of the improper authorization in the Registration Handler, with low to limited impact on confidentiality, integrity, and availability as indicated by the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor for updates from the vendor. Given the lack of a patch, consider restricting network access to the affected system and reviewing user privilege assignments to minimize risk.