[ Vendor · 4 CVEs ]
SmileCDR
CVEs affecting SmileCDR published in the last 30 days, plus any SmileCDR CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113875 | 22 Oct 2026 | CVSS 3.1 | SmileCDR HAPI FHIROn a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to… | |
| CVE-2026-113876 | 22 Oct 2026 | CVSS 4.3 | SmileCDR HAPI FHIRSmileCDR HAPI FHIR does not correctly check authorization for conditional create actions. A user with CREATE but not READ permissions could submit a… | |
| CVE-2026-113873 | 22 Oct 2026 | CVSS 7.5 | SmileCDR HAPI FHIRSmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust… | |
| CVE-2026-113874 | 22 Oct 2026 | CVSS 8.1 | SmileCDR HAPI FHIRSmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce… |