CVE-2026-104133 | OpenEMR up to 8.2.x DORN module compendium_install.php uninstall labGuid cross-site request forgery

November 5, 2026 Yanac

A vulnerability was found in OpenEMR up to 8.2.x. It has been declared as problematic. The affected element is the function LabCompendiumInstall::uninstall of the file interface/modules/custom_modules/oe-module-dorn/public/compendium_install.php of the component DORN module. Executing a manipulation of the argument labGuid can lead to cross-site request forgery.

This vulnerability appears as CVE-2026-104133. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More