CVE-2026-124478 | OpenEMR up to 8.2.x AddRecall Action save.php addRecall new_pid improper authorization

A vulnerability identified as problematic has been detected in OpenEMR up to 8.2.x. Affected by this vulnerability is the function addRecall of the file /interface/main/messages/save.php of the component AddRecall Action. Performing a manipulation of the argument new_pid results in improper authorization.

This vulnerability is identified as CVE-2026-124478. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More