Epic Systems EHR — the dominant U.S. hospital and health-system electronic health record (MyChart, Hyperspace).
Epic Systems announced a pause on product development to address security bugs affecting its healthcare systems. The company is focusing resources on fixing vulnerabilities that could expose patient data, with the effort expected to span several weeks. MyChart, Epic's widely-used patient portal, was among systems at risk.
Two authenticated vulnerabilities disclosed in Epic Security Center: CVE-2026-19681 (command injection via file upload, CVSS 9.9) and CVE-2026-19631 (SQL injection for administrators, CVSS 4.9). Both published 2026-08-14. No patch information currently available; mitigation requires access restrictions and activity monitoring.