ZDI-CAN-28733 HIGH 7.2 Upcoming Jan 30, 2026

Medplum

Medplum is a healthcare data platform that manages patient health records and medical information systems. This high-severity vulnerability can be exploited remotely by authenticated users with high privileges to compromise the confidentiality, integrity, and availability of the system, though it requires no user interaction. Security teams should monitor for any suspicious activity from administrative accounts and prioritize patching once Medplum releases a fix by their May 2026 deadline.

Advisory Details
Researcher Discovered by: Brandon Evans of TrendAI Zero Day Initiative
Reported January 30, 2026
Deadline May 30, 2026 43d
CVSS Vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy