CVE-2026-124473 | OpenEMR up to 8.2.0 SOAP note update API sid improper authorization

November 8, 2026 Yanac

A vulnerability classified as problematic has been found in OpenEMR. Affected by this issue is some unknown functionality of the component SOAP note update API. The manipulation of the argument sid leads to improper authorization.

This vulnerability is documented as CVE-2026-124473. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More