CVE-2026-124469 | OpenEMR up to 8.2.x Fee Sheet sellDrug prod[N][warehouse] sql injection

A vulnerability described as critical has been identified in OpenEMR up to 8.2.x. The affected element is the function DrugSalesService::sellDrug of the component Fee Sheet. Such manipulation of the argument prod[N][warehouse] leads to sql injection.

This vulnerability is listed as CVE-2026-124469. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More