All CVEs
CVE-2026-113873
HIGH7.5
Published 2026-10-22 · Source 9119a7d8-5eab-497f-8521-727c672e3725
Description
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409