ZDI-CAN-28733
HIGH 7.2
Upcoming
Jan 30, 2026
Medplum
Medplum is a healthcare data platform that manages patient health records and medical information systems. This high-severity vulnerability can be exploited remotely by authenticated users with high privileges to compromise the confidentiality, integrity, and availability of the system, though it requires no user interaction. Security teams should monitor for any suspicious activity from administrative accounts and prioritize patching once Medplum releases a fix by their May 2026 deadline.
Advisory Details
Researcher
Discovered by:
Brandon Evans of TrendAI Zero Day Initiative
Reported
January 30, 2026
Deadline
May 30, 2026
43d
CVSS Vector
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H