CVE-2026-102940 | OpenEMR up to 8.3.x Document Reassignment C_Document.class.php Document::change_patient improper authorization

A vulnerability has been found in OpenEMR up to 8.3.x and classified as critical. This vulnerability affects the function Document::change_patient of the file controllers/C_Document.class.php of the component Document Reassignment. This manipulation causes improper authorization.

This vulnerability is registered as CVE-2026-102940. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More