// EpicCRITICAL
Two authenticated vulnerabilities disclosed in Epic Security Center: CVE-2026-19681 (command injection via file upload, CVSS 9.9) and CVE-2026-19631 (SQL injection for administrators, CVSS 4.9). Both published 2026-08-14. No patch information currently available; mitigation requires access restrictions and activity monitoring.
- An authenticated command injection vulnerability exists in Secur(opens in a new tab)
- A SQL injection vulnerability exists in Security Center that cou(opens in a new tab)
// Get alerts for Epic