Main
Vulnerability Database
Exploits
ID:12690 - Exploit for Origin validation error in FHIR - CVE-2026-34359
ID:12690 - Exploit for Origin validation error in FHIR - CVE-2026-34359
Published: May 4, 2026
Vulnerability identifier: #VU129395
Vulnerability risk: High
CVE-ID: CVE-2026-34359
CWE-ID: CWE-346
Exploitation vector: Remote access
Vulnerable software:
FHIR
FHIR
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to improper URL prefix matching on HTTP redirect in HAPI FHIR core. A remote attacker can gain access to sensitive information on the system or modify data.
Remediation
Install updates from vendor's website.