{"id":"EM-20261108-TLAC","url":"https://cyber.eventmonitor.net/incident/EM-20261108-TLAC/openemr-vulnerability-cve-2026-124485/","type":"cve","title":"OpenEMR Vulnerability (CVE-2026-124485)","subtitle":"CVE-2026-124485","subject":"CVE-2026-124485","status":"Developing","severity":"high","affected":[],"headline":null,"born":"2026-11-08T15:31:29.000Z","firstSignal":"2026-11-08T14:18:17.927Z","lastSignal":"2026-11-08T15:31:29.000Z","updated":"2026-11-08T16:25:20.514Z","revision":1,"life":[{"status":"Born","at":"2026-11-08T15:31:29.000Z","why":"second independent source: C29 CIRCL Vulnerability-Lookup"},{"status":"Developing","at":"2026-11-08T15:31:29.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-08T14:18:17.927Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-08T15:31:29.000Z","what":"Born: second source, C29 CIRCL Vulnerability-Lookup. Page EM-20261108-TLAC created."}],"stages":[{"name":"Disclosed","at":"2026-11-08T14:18:17.927Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-08T14:18:17.927Z","detail":"CVSS 7.1"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-08T14:18:17.927Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":3,"title":"CVE-2026-124485 (CVSS 7.1)","text":"OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal onsitedocuments API that allows authenticated patients to read other patients' documents by overriding query criteria. Attackers can send empty pid_Equals and denialReason_IsNotLike parameters to remove patient scoping and locked filters, exposing consent bodies, signatures, file paths, and template data.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124485"},{"at":"2026-11-08T15:31:29.000Z","source":"C29","sourceName":"CIRCL Vulnerability-Lookup","role":"Database","severity":2,"title":"GHSA-mm3c-hq5r-q7pg / CVE-2026-124485","text":"OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal onsitedocuments API that allows authenticated patients to read other patients' documents by overriding query criteria. Attackers can send empty pid_Equals and denialReason_IsNotLike parameters to remove…","url":"https://vulnerability.circl.lu/vuln/GHSA-mm3c-hq5r-q7pg"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-08T14:18:17.927","score":7.1,"severity":"HIGH","desc":"OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal onsitedocuments API that allows authenticated patients to read other patients' documents by overriding query criteria. Attackers can send empty pid_Equals and denialReason_IsNotLike parameters to remove…","product":"","seen":1794155120514},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}