CVE-2026-126437

Sažetak

OpenEMR before 8.5.0 contains an authorization bypass vulnerability in portal/lib/download_template.php that allows any authenticated core user to render documents for arbitrary patients by setting isModule. Attackers can submit arbitrary pid and template_id values to disclose patient names, birth dates, chart IDs, addresses, allergies, medications, and problem lists despite ACL and squad restrictions.

Reference

https://github.com/openemr/openemr/security/advisories/GHSA-vc2h-x8xf-8jcv
https://www.vulncheck.com/advisories/openemr-before-8.5.0-authorization-bypass-via-portal-lib-download-template-php

CVSS

Base:	6.5
Impact:	3.6
Exploitability:	2.8

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	LOW

Impact

Povjerljivost	Cjelovitost	Dostupnost
HIGH	NONE	NONE

CVSS vektor

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Zadnje važnije ažuriranje

13-11-2026 - 10:17

Objavljeno

13-11-2026 - 10:17