Skip to content
OpenAdvisories

Vendor

SmileCDR

4 known vulnerabilities.

Products

HAPI FHIR 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-113874

    SmileCDR HAPI FHIR trusted tenant partition override

    SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to anoth…

    SmileCDR HAPI FHIR
  • High 7.5
    CVE-2026-113873

    SmileCDR HAPI FHIR improper data decompression

    SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.

    SmileCDR HAPI FHIR