PT-2026-121503
CVE-2026-113875
·
Published
2026-10-22
·
Updated
2026-10-22
Description by
CVSS 3.1
3.1
LowMetricsAV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they are not otherwise permitted to access.
Found an issue in the description? Have something to add? Feel free to write us 👾