CVE-2026-124488 | OpenEMR up to 8.2.x Forms load_form.php authorization

November 8, 2026 Yanac

A vulnerability marked as critical has been reported in OpenEMR up to 8.2.x. This affects an unknown part of the file load_form.php of the component Forms. The manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-124488. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More