CVE-2026-124449 | OpenEMR up to 8.3.9 FHIR Routes improper authorization

November 8, 2026 Yanac

A vulnerability was found in OpenEMR up to 8.3.9 and classified as problematic. This vulnerability affects unknown code of the component FHIR Routes. Such manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-124449. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More