ZDI-CAN-28734
HIGH 7.7
Upcoming
Jan 30, 2026
Medplum
Medplum is a healthcare data platform that manages patient records and medical information systems. This high-severity vulnerability (CVSS 7.7) likely allows remote exploitation with limited or no authentication requirements, potentially affecting the confidentiality and integrity of sensitive health data. Security teams should monitor for any exploitation attempts targeting Medplum deployments and prepare patches ahead of the May 30, 2026 vendor deadline.
Advisory Details
Researcher
Brandon Evans of TrendAI Zero Day Initiative
Reported
January 30, 2026
Deadline
May 30, 2026
44d