CVE-2024-55374: Vanderbilt Redcap

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts.

Affected products

• Vanderbilt Redcap: version 14.3.13 only

Published 2026-01-02. Last modified 2026-07-05.