CVE-2026-111312 | OpenHealthForAll OpenHealth up to 0.2.0 Health Data Handlers /api/health-data/[id] id missing authentication

October 15, 2026 Yanac

A vulnerability classified as critical was found in OpenHealthForAll OpenHealth up to 0.2.0. This issue affects some unknown processing of the file /api/health-data/[id] of the component Health Data Handlers. Executing a manipulation of the argument ID can lead to missing authentication.

This vulnerability is tracked as CVE-2026-111312. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More