Product
OpenEMR: Local file inclusion and remote code execution (CVE-2026-124467)
1 rule 1 TTP 1 CVEOpenEMR versions prior to 8.4.0 contain a local file inclusion vulnerability in the ESign router, allowing authenticated attackers to execute arbitrary code via a malicious file upload.
OpenEMR: Missing authorization in portal onsite-document APIs (CVE-2026-124484)
1 CVEOpenEMR versions prior to 8.4.0 contain a missing authorization flaw allowing authenticated users to access and modify cross-patient records by manipulating API parameters.
OpenEMR: Incorrect authorization in prescription REST API (CVE-2026-124483)
1 TTP 1 CVEOpenEMR versions prior to 8.4.0 contain an incorrect authorization flaw in the prescription REST API, allowing authenticated staff to forge or deactivate patient prescriptions.
OpenEMR: FHIR API authorization bypass (CVE-2026-124480)
1 rule 1 TTP 1 CVEOpenEMR versions before 8.4.0 contain an authorization bypass vulnerability allowing authenticated users to exfiltrate cross-patient questionnaire data via the FHIR API.
OpenEMR: Server-side request forgery in OAuth2 client registration (CVE-2026-124466)
2 TTPs 1 CVEOpenEMR versions prior to 8.4.0 contain an SSRF vulnerability in the OAuth2 client registration process that allows unauthenticated attackers to probe internal services and cloud metadata endpoints.
OpenEMR: SQL injection via mass assignment in patient portal (CVE-2026-124444)
1 CVEOpenEMR versions before 8.4.0 contain a mass assignment vulnerability in the patient portal OnsiteDocument query API that facilitates SQL injection.