A AegiFlow
HIGHCVSS 8.8

CVE-2026-52868

CVE-2026-52868 updated by NVD

Modified
2026-10-27
Sources
nvd

Summary

An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or clinic data separation.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.