CVE-2026-124481 | OpenEMR up to 8.3.9 Rainforest Patient Portal Payments portal_payment.rainforest.php patientId/encounter/amount improper authorization

A vulnerability labeled as critical has been found in OpenEMR up to 8.3.9. Affected by this issue is some unknown functionality of the file portal_payment.rainforest.php of the component Rainforest Patient Portal Payments. Executing a manipulation of the argument patientId/encounter/amount can lead to improper authorization.

This vulnerability is tracked as CVE-2026-124481. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More