CVE-2026-113873
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Oct 22, 2026
Vendor
unknown
Description
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.