What’s Vulnerable › Products

VSee Clinic vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your VSee Clinic version is affected

Latest VSee Clinic vulnerabilities

• CVE-2026-13381 — VSee Clinic and API Insecure Direct Object Reference in File API Allows Unauthorized File Access and Deletion (CVSS 8.1)
• CVE-2026-13380 — VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responses (CVSS 7.5)