CVE-2026-124444 | OpenEMR up to 8.3.x OnsiteDocument query API Id_BitwiseAnd dynamically-determined object attributes

November 8, 2026 Yanac

A vulnerability was found in OpenEMR up to 8.3.x. It has been rated as critical. The affected element is an unknown function of the component OnsiteDocument query API. The manipulation of the argument Id_BitwiseAnd leads to dynamically-determined object attributes.

This vulnerability is referenced as CVE-2026-124444. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More