Main
Vulnerability Database
Exploits
ID:12689 - Exploit for Insufficiently protected credentials in FHIR - CVE-2026-34361
ID:12689 - Exploit for Insufficiently protected credentials in FHIR - CVE-2026-34361
Published: May 4, 2026
Vulnerability identifier: #VU129396
Vulnerability risk: High
CVE-ID: CVE-2026-34361
CWE-ID: CWE-522
Exploitation vector: Remote access
Vulnerable software:
FHIR
FHIR
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to gain access to sensitive information on the system.
The vulnerability exists due to insufficiently protected credentials in the /loadIG endpoint. A remote attacker can steal authentication tokens configured for legitimate FHIR servers.
Remediation
Install updates from vendor's website.