SmileCDR vulnerabilities
We track 2 vulnerabilities in SmileCDR products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest SmileCDR vulnerabilities
- 8.1 High severity
HAPI FHIR: Incorrect Authorization
SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to anothe
- 7.5 High severity
HAPI FHIR: Improper Handling of Highly Compressed Data (Data Amplification)
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.