CVE-2026-124486 | OpenEMR up to 8.2.x Classic Document Controller move_action_process patient_id privileges management

A vulnerability, which was classified as critical, was found in OpenEMR up to 8.2.x. The impacted element is the function move_action_process of the component Classic Document Controller. Executing a manipulation of the argument patient_id can lead to improper privilege management.

This vulnerability appears as CVE-2026-124486. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More