CVE-2026-113874 — SmileCDR HAPI FHIR trusted tenant partition override
SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement…
Published: 2026-10-22 · CVSS: 8.6 · CVSS 4.0
SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7