Severity: Medium Successful exploitation of CVE-2026-76504 could allow a remote attacker to bypass authentication by sending a crafted HTTP request to the API of the affected system Successful exploitation of CVE-2026-76504 could allow a remote attacker to bypass authentication by sending a crafted HTTP request to the API of the affected system Updated: 30 Sep 2026
Original source:
NHS Cyber Alerts
Read the complete healthcare update
This page contains a brief summary of information
published by an external healthcare source. Please
visit the original source for the complete update.