CVE-2026-124489 | OpenEMR up to 8.2.x Billing portal_payment.php pid/form_pid access control

A vulnerability was found in OpenEMR up to 8.2.x and classified as critical. Affected by this issue is some unknown functionality of the file portal/portal_payment.php of the component Billing. Such manipulation of the argument pid/form_pid leads to improper access controls.

This vulnerability is traded as CVE-2026-124489. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More