Smilecdr Hapi Fhir
3 CVEs affecting Smilecdr Hapi Fhir. Latest disclosed: 2026-10-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-113874 | High | 8.1 | 2026-10-22 | SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage par… |
CVE-2026-113876 | Medium | 4.3 | 2026-10-22 | SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions. A user with CREATE but not READ permissions could submit a conditiona… |
CVE-2026-113875 | Low | 3.1 | 2026-10-22 | On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read… |