PT-2026-146723
CVE-2026-126437
·
Published
2026-11-13
·
Updated
2026-11-13
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
OpenEMR before 8.5.0 contains an authorization bypass vulnerability in portal/lib/download template.php that allows any authenticated core user to render documents for arbitrary patients by setting isModule. Attackers can submit arbitrary pid and template id values to disclose patient names, birth dates, chart IDs, addresses, allergies, medications, and problem lists despite ACL and squad restrictions.
Found an issue in the description? Have something to add? Feel free to write us 👾