Multiple Vulnerabilities Identified in Component Used by Smile Digital Health’s Smile CDR

Reported by HIPAA Journal (Steve Alder)

Summary by Cyber Security News26 Oct 2026, 14:55 CET

About this summary. This is a short excerpt from the description that HIPAA Journal published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.hipaajournal.com/hapi-fhir-vulnerabilities-smile-cdr/

Four vulnerabilities have been identified in HAPI FHIR, the open-source Java library and server framework that implements the HL7 FHIR standard, that affect Smile Digital Health’s Smile CDR clinical data repository and health data platform. The four vulnerabilities were identified by security researcher Abhinav Agarwal, who demonstrated that they can be exploited against HAPI FHIR 8.10.0, used by Smile CDR 2026.05.R01.

Read the full article at HIPAA Journal →

Source attribution: headline and facts are from HIPAA Journal (hipaajournal.com). Summary method: excerpt of the source description. See our source attribution policy.