Tag

Medical-Software

2 briefs RSS

OpenEMR: Stored Cross-Site Scripting (CVE-2026-124463)

OpenEMR versions prior to 8.3.0 contain a stored cross-site scripting vulnerability allowing authenticated users with CAMOS access to execute arbitrary scripts in a victim context.

OpenEMR xss web-application medical-software

2t 1c 12h ago

high advisory

OpenEMR: Incorrect authorization in prescription REST API (CVE-2026-124483)

1 TTP 1 CVE

OpenEMR versions prior to 8.4.0 contain an incorrect authorization flaw in the prescription REST API, allowing authenticated staff to forge or deactivate patient prescriptions.

OpenEMR web-application medical-software authorization-bypass cve-2026-124483

1t 1c 14h ago