Log in Start free

medplum

Products

ProductCVEsExploitedLatest
medplum3–Sep 3, 2026

Exploited and recent CVEs

  • CVE-2026-44506 High 8.2 Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations 0.4%
  • CVE-2026-53728 High 7.1 Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage 0.2%
  • CVE-2026-49120 High 8.5 Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint 0.2%