CVE-2026-126322 | OpenEMR up to 8.2.x Patient Match patient_match_dialog.php key deserialization

November 13, 2026 Yanac

A vulnerability described as critical has been identified in OpenEMR up to 8.2.x. The affected element is an unknown function of the file interface/orders/patient_match_dialog.php of the component Patient Match. The manipulation of the argument key results in deserialization.

This vulnerability was named CVE-2026-126322. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More