Unknown Kivicare vulnerabilities

• iqonic design kivicare KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure CVE-2026-13611 5.3 MediumSeptember 1, 2026
• iqonic design kivicare KiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOR CVE-2026-19417 6.5 MediumAugust 19, 2026
• iqonic design kivicare KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR CVE-2026-19416 4.3 MediumAugust 19, 2026
• iqonic design kivicare KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration CVE-2026-13610 Public exploit 7.5 HighAugust 13, 2026
• iqonic design kivicare KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint CVE-2026-13613 8.8 HighAugust 12, 2026
• iqonic design kivicare KiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR CVE-2026-13612 4.3 MediumAugust 12, 2026
• iqonic kivicare KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting CVE-2023-2624 6.1 MediumJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Multiple CSRF CVE-2023-2628 8.8 HighJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure CVE-2023-2623 6.5 MediumJune 27, 2023
• iqonic kivicare KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls CVE-2023-2627 4.3 MediumJune 27, 2023
• iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 more KiviCare < 2.3.9 - Unauthenticated SQLi CVE-2022-0786 EPSS 13.3% 9.8 CriticalJune 13, 2022