{"id":"EM-20261108-GUR5","url":"https://cyber.eventmonitor.net/incident/EM-20261108-GUR5/openemr-vulnerability-cve-2026-124471/","type":"cve","title":"OpenEMR Vulnerability (CVE-2026-124471)","subtitle":"CVE-2026-124471","subject":"CVE-2026-124471","status":"Developing","severity":"high","affected":[],"headline":null,"born":"2026-11-08T15:31:28.000Z","firstSignal":"2026-11-08T14:18:15.447Z","lastSignal":"2026-11-08T15:31:28.000Z","updated":"2026-11-08T16:25:20.514Z","revision":1,"life":[{"status":"Born","at":"2026-11-08T15:31:28.000Z","why":"second independent source: C29 CIRCL Vulnerability-Lookup"},{"status":"Developing","at":"2026-11-08T15:31:28.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-08T14:18:15.447Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-08T15:31:28.000Z","what":"Born: second source, C29 CIRCL Vulnerability-Lookup. Page EM-20261108-GUR5 created."}],"stages":[{"name":"Disclosed","at":"2026-11-08T14:18:15.447Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-08T14:18:15.447Z","detail":"CVSS 8.6"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-08T14:18:15.447Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":3,"title":"CVE-2026-124471 (CVSS 8.6)","text":"OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_invoice.php that allows any authenticated user to read and modify billing data for any encounter. Attackers can iterate the id parameter to read patient names and billing notes, and post payments, adjustments, deletions, or billing notes against any patient's account.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124471"},{"at":"2026-11-08T15:31:28.000Z","source":"C29","sourceName":"CIRCL Vulnerability-Lookup","role":"Database","severity":2,"title":"GHSA-pj2w-4q83-hqcg / CVE-2026-124471","text":"OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_invoice.php that allows any authenticated user to read and modify billing data for any encounter. Attackers can iterate the id parameter to read patient names and billing notes, and post payments…","url":"https://vulnerability.circl.lu/vuln/GHSA-pj2w-4q83-hqcg"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-08T14:18:15.447","score":8.6,"severity":"HIGH","desc":"OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_invoice.php that allows any authenticated user to read and modify billing data for any encounter. Attackers can iterate the id parameter to read patient names and billing notes, and post payments…","product":"","seen":1794155120514},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}