Skip to content
OpenAdvisories

Vendor

SmileCDR

4 known vulnerabilities.

Products

HAPI FHIR 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-113875

    SmileCDR HAPI FHIR unauthorized read via subscription

    On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they are not otherwise permitted to access.

    SmileCDR HAPI FHIR