CVE-2026-124485 | OpenEMR up to 8.2.9 OnsiteDocuments API pid_Equals/denialReason_IsNotLike authorization

A vulnerability has been found in OpenEMR up to 8.2.9 and classified as problematic. This affects an unknown function of the component OnsiteDocuments API. The manipulation of the argument pid_Equals/denialReason_IsNotLike leads to authorization bypass.

This vulnerability is traded as CVE-2026-124485. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More