CVE-2026-49142 | OpenEMR up to 8.4.x Syndromic Surveillance form_icd_codes[] sql injection

October 29, 2026 Yanac

A vulnerability classified as critical was found in OpenEMR up to 8.4.x. This affects an unknown part of the component Syndromic Surveillance Module. Executing a manipulation of the argument form_icd_codes[] can lead to sql injection.

This vulnerability is handled as CVE-2026-49142. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More