CVE WATCH / VULNERABILITY DETAIL
CVE-2026-124475
HIGHCVSS 7.1NVD feed
Published 8 November 2026 · tracked since 9 November 2026
Description
OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/lib/persist.php that allows authenticated portal patients to modify other patients' settings by supplying an arbitrary setting_patient value. Attackers can insert or overwrite patient_settings rows for victims
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125198 LOW 2.5
- CVE-2026-125041 MEDIUM 5.5
- CVE-2026-125040 MEDIUM 6.5
- CVE-2026-121769 HIGH 8.5
- CVE-2026-60117 MEDIUM 6.2
- CVE-2026-123796
- CVE-2026-123373
- CVE-2026-123372
- CVE-2026-123371
- CVE-2026-123370