CVE-2026-90817 | Vanderbilt University REDCap up to 13.3.0/16.0.48/17.3.9/17.4.3 Data Import stream code injection

September 20, 2026 Yanac

A vulnerability classified as critical was found in Vanderbilt University REDCap up to 13.3.0/16.0.48/17.3.9/17.4.3. Affected is an unknown function of the component Data Import. Such manipulation of the argument stream leads to code injection.

This vulnerability is traded as CVE-2026-90817. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More