CVE-2026-124458 | OpenEMR up to 8.3.x FHIR /fhir/Person/:uuid authorization

November 8, 2026 Yanac

A vulnerability labeled as problematic has been found in OpenEMR up to 8.3.x. This impacts an unknown function of the file /fhir/Person/:uuid of the component FHIR. Such manipulation of the argument uuid leads to authorization bypass.

This vulnerability is listed as CVE-2026-124458. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More