CVE-2026-124464 | OpenEMR up to 8.3.9 QuestionnaireResponse.rs authorization

November 8, 2026 Yanac

A vulnerability was found in OpenEMR up to 8.3.9. It has been declared as problematic. Impacted is an unknown function of the file patient/QuestionnaireResponse.rs. Executing a manipulation can lead to authorization bypass.

The identification of this vulnerability is CVE-2026-124464. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More