CVE-2026-33302 | OpenEMR up to 8.0.0.2 ACL AclMain::zhAclCheck authorization (GHSA-v68v-pwc4-8p2m)

March 20, 2026 Yanac

A vulnerability was found in OpenEMR up to 8.0.0.2. It has been rated as critical. This vulnerability affects the function AclMain::zhAclCheck of the component ACL. The manipulation leads to incorrect authorization.

This vulnerability is uniquely identified as CVE-2026-33302. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More