CVE-2026-124477 | OpenEMR up to 8.2.x Recall Deletion save.php delete_Recall pid/r_ID privileges management

A vulnerability classified as critical was found in OpenEMR up to 8.2.x. Impacted is the function delete_Recall of the file /interface/main/messages/save.php of the component Recall Deletion. Such manipulation of the argument pid/r_ID leads to improper privilege management.

This vulnerability is documented as CVE-2026-124477. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More