CVE-2026-124487 | OpenEMR up to 8.3.9 FHIR API patient privileges management

A vulnerability was found in OpenEMR up to 8.3.9 and classified as problematic. This impacts an unknown function of the component FHIR API. The manipulation of the argument patient results in improper privilege management.

This vulnerability is known as CVE-2026-124487. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More