CVE-2026-104135 | OpenEMR up to 8.2.x Payment payment_ajax.php improper authorization

November 5, 2026 Yanac

A vulnerability identified as problematic has been detected in OpenEMR up to 8.2.x. The affected element is an unknown function of the file library/ajax/payment_ajax.php of the component Payment. The manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-104135. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More