CVE-2026-104136 | OpenEMR up to 8.2.9 Message Saving Authorization save.php pid improper authorization

November 5, 2026 Yanac

A vulnerability was found in OpenEMR up to 8.2.9. It has been declared as problematic. This vulnerability affects unknown code of the file interface/main/messages/save.php of the component Message Saving Authorization. Such manipulation of the argument pid leads to improper authorization.

This vulnerability is traded as CVE-2026-104136. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More