CVE-2026-126437OpenEMR before 8.5.0 Authorization Bypass via portal/lib/download_template.php

Descripción

OpenEMR before 8.5.0 contains an authorization bypass vulnerability in portal/lib/download_template.php that allows any authenticated core user to render documents for arbitrary patients by setting isModule. Attackers can submit arbitrary pid and template_id values to disclose patient names, birth dates, chart IDs, addresses, allergies, medications, and problem lists despite ACL and squad restrictions.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• GitHub Security Advisory (GHSA-vc2h-x8xf-8jcv) vendor-advisory
• VulnCheck Advisory: OpenEMR before 8.5.0 Authorization Bypass via portal/lib/download_template.php third-party-advisory