REDCap vulnerabilities

1 known vulnerability in REDCap from Vanderbilt University. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  REDCap: External Control of File Name or Path

  CVE-2026-90817Sep 20, 2026Vanderbilt UniversityEPSS 3.75%

  An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route f