CVE-2026-124455 | OpenEMR up to 8.2.x OnsiteDocumentController Query Pid_Equals/Pid_GreaterThan/Pid_In resource injection

A vulnerability identified as problematic has been detected in OpenEMR up to 8.2.x. This affects the function OnsiteDocumentController::Query of the component OnsiteDocumentController. This manipulation of the argument Pid_Equals/Pid_GreaterThan/Pid_In causes improper control of resource identifiers.

This vulnerability is tracked as CVE-2026-124455. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More