// EpicCRITICAL
Two authenticated vulnerabilities disclosed in Epic Security Center: CVE-2026-19681 (command injection via file upload, CVSS 9.9) and CVE-2026-19631 (SQL injection for administrators, CVSS 4.9). Both published 2026-08-14. No patch information currently available; mitigation requires access restrictions and activity monitoring.