CVE-2026-67610 | OpenEMR up to 8.2.0 OAuth2 Dynamic Client Registration Endpoint jwks improper authentication

August 3, 2026 Yanac

A vulnerability has been found in OpenEMR up to 8.2.0 and classified as critical. This vulnerability affects unknown code of the component OAuth2 Dynamic Client Registration Endpoint. The manipulation of the argument jwks leads to improper authentication.

This vulnerability is traded as CVE-2026-67610. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More