CVE-2026-104139 | OpenEMR up to 8.2.x Patient Session Template Download library/ajax/set_pt.php cross-site request forgery

A vulnerability marked as problematic has been reported in OpenEMR up to 8.2.x. This affects an unknown function of the file library/ajax/set_pt.php of the component Patient Session Template Download. This manipulation causes cross-site request forgery.

The identification of this vulnerability is CVE-2026-104139. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More