CVE-2026-113873 — SmileCDR HAPI FHIR improper data decompression
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain se…
Published: 2026-10-22 · CVSS: 8.7 · CVSS 4.0
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7