CVE-2026-103939 | OpenEMR up to 8.2.9 Weno file_download.php removeWenoPharmacies cross-site request forgery

A vulnerability was found in OpenEMR up to 8.2.9 and classified as problematic. This issue affects the function PharmacyService::removeWenoPharmacies of the file interface/modules/custom_modules/oe-module-weno/scripts/file_download.php of the component Weno Module. Such manipulation leads to cross-site request forgery.

This vulnerability is documented as CVE-2026-103939. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More