CVE-2026-104134 | OpenEMR up to 8.2.x Person Search person_search_ajax.php search_persons improper authorization

A vulnerability was found in OpenEMR up to 8.2.x. It has been classified as problematic. Impacted is the function search_persons of the file library/ajax/person_search_ajax.php of the component Person Search. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-104134. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More