CVE-2026-103938 | OpenEMR up to 8.2.x Billing Operations pos_checkout_ippf.php cross-site request forgery

November 5, 2026 Yanac

A vulnerability categorized as problematic has been discovered in OpenEMR up to 8.2.x. Impacted is an unknown function of the file interface/patient_file/pos_checkout_ippf.php of the component Billing Operations. Executing a manipulation can lead to cross-site request forgery.

This vulnerability is handled as CVE-2026-103938. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More