{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-124483/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.3,"id":"CVE-2026-124483"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenEMR (\u003c 8.4.0)"],"_cs_severities":["high"],"_cs_tags":["web-application","medical-software","authorization-bypass","cve-2026-124483"],"_cs_type":"advisory","_cs_vendors":["OpenEMR"],"content_html":"\u003cp\u003eOpenEMR versions before 8.4.0 contain an incorrect authorization vulnerability in the prescription REST API. The API improperly validates requests by checking the patients.med ACL instead of the intended patients.rx ACL and fails to verify required permission bits. This allows an authenticated staff user with basic read-only access to perform unauthorized actions, including the enumeration of prescription UUIDs, the forging of prescriptions for any patient, and the deactivation of existing prescriptions across the system.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows authenticated staff users to manipulate prescription data, which could result in unauthorized medical prescriptions or the disruption of existing patient care. The scope of the vulnerability is tenant-wide.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade OpenEMR to version 8.4.0 or later to apply the fix for CVE-2026-124483.\u003c/li\u003e\n\u003cli\u003eUntil patching is complete, audit access logs for high-frequency or unauthorized access to prescription REST API endpoints by users who do not require such access for their roles.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-08T15:36:23Z","date_published":"2026-11-08T15:36:23Z","id":"https://feed.craftedsignal.io/briefs/2026-11-openemr-auth-bypass-ba3c3f5b/","summary":"OpenEMR versions prior to 8.4.0 contain an incorrect authorization flaw in the prescription REST API, allowing authenticated staff to forge or deactivate patient prescriptions.","title":"OpenEMR: Incorrect authorization in prescription REST API (CVE-2026-124483)","url":"https://feed.craftedsignal.io/briefs/2026-11-openemr-auth-bypass-ba3c3f5b/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-124483","version":"https://jsonfeed.org/version/1.1"}