CVE-2026-33915 | OpenEMR up to 8.0.0.2 REST API request_authorization_check (GHSA-ww94-26v7-x4gp)

March 26, 2026 Yanac

A vulnerability classified as critical has been found in OpenEMR. Affected by this issue is the function RestConfig::request_authorization_check of the component REST API. Performing a manipulation results in missing authorization.

This vulnerability is identified as CVE-2026-33915. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More