CVE-2026-113875

On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they are not otherwise permitted to access...

CVE-2026-113875 SmileCDR HAPI FHIR unauthorized read via subscription

On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they are not otherwise permitted to access...

CVE-2026-113875

On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they are not otherwise permitted to access...

CVE-2026-113875

The SmileCDR HAPI FHIR server is vulnerable to an unauthorized read vulnerability when REST-hook subscriptions are enabled. If a user possesses subscription-creation permissions , they can exploit this flaw to query and access resources for which they do not have the necessary permissions. The ro...

EUVD-2026-108275

On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they are not otherwise permitted to access...

HAPI FHIR

RISK EVALUATION SmileCDR HAPI FHIR contains multiple vulnerabilities. In the worst case, a user could read or write content in a tenant partition that they should not have access to, or an unauthenticated user could trigger a denial-of-service. 2. RECOMMENDED PRACTICES Update to most recent...

PT-2026-121503

On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they are not otherwise permitted to access...

Smile Digital Health HAPI FHIR authorization issue vulnerability

Smile Digital Health HAPI FHIR has an authorization issue vulnerability stemming from improper access control. When REST-hook subscriptions are enabled, users with subscription creation privileges may query and read resources they are otherwise denied access to, resulting in unauthorized access...

CVE-2025-8723

The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hookrestpredispatch method in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject...