CVE-2026-124490 | OpenEMR up to 8.2.x RCFaxClient disposeDocument file_path path traversal

November 8, 2026 Yanac

A vulnerability described as critical has been identified in OpenEMR up to 8.2.x. This vulnerability affects the function disposeDocument of the component RCFaxClient. The manipulation of the argument file_path results in path traversal.

This vulnerability is cataloged as CVE-2026-124490. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More