CVE-2026-81875 | hapifhir org.hl7.fhir.core up to 6.9.11 SHCParser SHCParser.java SHCParser.decodeJWT input validation

A vulnerability classified as problematic was found in hapifhir org.hl7.fhir.core up to 6.9.11. Impacted is the function SHCParser.decodeJWT of the file org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java of the component SHCParser. Such manipulation leads to improper input validation.

This vulnerability is referenced as CVE-2026-81875. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More