CVE-2026-126437OpenEMR before 8.5.0 Authorization Bypass via portal/lib/download_template.php

Beschreibung

OpenEMR before 8.5.0 contains an authorization bypass vulnerability in portal/lib/download_template.php that allows any authenticated core user to render documents for arbitrary patients by setting isModule. Attackers can submit arbitrary pid and template_id values to disclose patient names, birth dates, chart IDs, addresses, allergies, medications, and problem lists despite ACL and squad restrictions.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• GitHub Security Advisory (GHSA-vc2h-x8xf-8jcv) vendor-advisory
• VulnCheck Advisory: OpenEMR before 8.5.0 Authorization Bypass via portal/lib/download_template.php third-party-advisory